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Revision History 

R.1 Revision 0 (09 September 2005) 

Revision 0 of SBC-3 is substantially equal to revision 16 of SBC-2. The only differences arise from changes 
made in SBC-2 discovered during the ISO process. Those changes include: 

a) Changed idle condition timer to standby condition timer in item c) of subclause 4.15.1. 

b) Changed 2 Gigabytes to 1 GiB and 2 Terabytes to 2 TiB in two places in note 10 in subclause 5.5. 
The 2 was change to a 1 because there are 21 bits in the logical block address field (i.e., 1F FFFF 
is 2 097 151 that * 512 is 1 073 741 312 which is 1 GiB). 

Removed the corrct bit from the WRITE LONG (16) CDB as it was never supposed to be added to this 
command. It's not in SCSI-2 or SBC for WRITE LONG (10) and 03-383r1 did not ask for it. It showed up in 
sbc2r11. 

R.2 Revision 1 (16 September 2005) 

a) Incorporated the following proposals: 

A) 04-198r5 - Background Media Scan; 

B) 04-371 r2 - SPC-4: Enable Background Operation Error Reporting Bit; and 

C) 05-101 rl - SBC-2 Validation of Protection Information. 

R.3 Revision 2 (22 September 2005) 

a) Incorporated the following proposals: 

A) 05-299r1 - Correct Log Page Format Tables in SPC-4, SBC-3, & SAS-2; and 

B) 05-313r0 - SBC-3: Change to background medium scan. 

R.4 Revision 3 (16 November 2005) 

a) Incorporated the following proposals: 

A) 05-156r7 - SBC-3, SPC-4: Application ownership of protection information Reference Tag; 

B) 05-317r3 - SMC-3, SPC-4, SBC-3, and SSC-3: Remove Attached Media Changer model; and 

C) 05-374r2 - SBC-3: SPC-4: Disabling Reassign on Write Long Logical Blocks. 

R.5 Revision 4 (10 February 2006) 

a) Incorporated the following proposals: 

A) 05-157r9 - SPC Security Commands proposal (in an E-mail it was pointed out that the 
SERCURITY PROTOCOL IN and SECURITY PROTOCOL OUT commands need to be added to 
the SBC-3 commands list table); 

B) 05-340r3 - SBC-3 SPC-4 Background scan additions; 

C) 05-368r2 - SPC-4 SBC-3 SMC-3 Allow more commands through Write Exclusive reservations; 
and 

D) 05-383r4 - SPC-4: Deferred microcode downloads. 

In addition the following editorial corrections were received from E-mail were incorporated: 

a) the initiator control (ic) enable bit description had the size bit polarity backwards; 

b) changed filed to field; 

c) WRITE SAME (32) was placed into the list of medium access commands in the Protection types 
overview subclause; 

d) the field name p_typeable in table 19 (fmtpinfo bit, rto_req bit, and protection field usage field) 
footnote d was changed to p_type; and 

e) the field name data block guard in table 80 (lbdata bit and pbdata bit) in row 0 0 was changed to 

LOGICAL BLOCK GUARD. 

R.6 Revision 5 (11 May 2006) 

a) Incorporated the following proposals: 
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A) 06-248M - Proposal to remove the PREVENT ALLOW MEDIUM REMOVAL (PAMR) command 
from SPC-4 

In addition the following editorial corrections were received from E-mail were incorporated: 

a) The following sentence occurs on SBC-3 rev. 3, page 122, first paragraph under table 110, last 
sentence of paragraph; and also on page 124, first paragraph under table 111, last sentence of 
paragraph: 

“To determine the number of blocks at which the logical unit is currently formatted, the application 
client shall use the READ CAPACITY command (see 5.11) rather than the MODE SELECT 
command.” 

In both cases, the “MODE SELECT” needs to be replaced with “MODE SENSE”. To use the “select” 
operation is nonsensical if the purpose is to discover the current block size of the disk drive. 

R.7 Revision 6 (24 July 2006) 

a) Incorporated the following proposals: 

A) 06-259r1 - SAM-4, et al.: making linked commands obsolete; 

B) 06-274r1 - SPC-4 SBC-3 REQUEST SENSE and Stopped power condition; and 

C) 06-323r1 - SAM-4 SPC-4 et al Multiple service delivery subsystem editorial tweaks. 

R.8 Revision 7 (22 September 2006) 

a) Incorporated the following proposals: 

A) 06-034r5 - SBC-3 Physical blocks; and 

B) 06-350r0 - SPC-4/SBC-3: Power conditions state machine clarification. 

In addition the following editorial corrections were received from E-mail were incorporated: 

a) In the Background Scan Results log page (section 6.2.2) in table 101 on page 119, there seems to be 
a missing “scan” in the row for code 08h. It currently reads: 

“Background medium halted, waiting...”. 

GAH: Agreed, it should read “Background medium scan halted, waiting...”. I note that the word 
“medium” is not present in the descriptions of other code rows, maybe that word should be removed 
for consistency. 

GOP: The word “medium” was added to all the descriptions of other code rows to make it consistent 
with the rest of the clause. 

b) In “Background medium scan parameter format” for parameter code 0001 h to 0800h shown in table 
102 the “accumulated power on minutes” field is defined on page 121 as “The ACCUMULATED 
POWER ON MINUTES field indicates the number of minutes the device server has been powered on 
since manufacturing.” That is the same definition of the same named field found in the “Background 
medium scan status parameter format” (for parameter code 0) shown in table 99. Shouldn't the 
description associated with table 102 be referencing when the error associated with that parameter 
number was logged [similar to the way the self test log page outputs its results]? 

GAH: I agree. It should say “The ACCUMULATED POWER ON MINUTES field indicates the number 
of minutes the device server has been powered on since manufacturing at the time the background 
scan error occurred.” 

R.9 Revision 8 (18 January 2007) 

Fixed the byte numbering in the READ CAPACITY (16) parameter data table in 5.13.2. 

Based on the following E-mail from Mark Evans pointing out error in the incorporation of proposal 05-340r3 
changes were made to table 107 and table 110 and a description of the ds bit and the spf bit were placed 
under table 104: 
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While going through SBC-3, I see that table 102 (parameter control bits for Background Scanning 
Status log parameter) looks goofy. I think it should look like table 194 in SAS. I'm making that change 
in our internal document and recommend that you make the change in SBC. 

Incorporated the following proposals: 

a) 06-479r1 - Mandate CAPACITY DATA HAS CHANGED unit attention; and 

b) 06-393r3 - On-disk bitmap support. 

R.10 Revision 8a (18 January 2007) 

The ORWRITE CDB table title was fixed and the ORWRITE operation code in the CDB was corrected. 

R.11 Revision 9 (22 March 2007) 

Based on the following 1/23/2007 E-mail from Mark Evans pointing out a duplicate entry between subclause 
4.17 Protection information model and subclause 5.31 WRITE AND VERIFY (10) command. The duplicate 
wording that needs to be deleted is from 5.31 WRITE AND VERIFY (10) command and is: 

If the P_TYPE bit is set to one in the READ CAPACITY (16) parameter data (see 5.13), the device 
server shall terminate this command with CHECK CONDITION status with the sense key set to 
ILLEGAL REQUEST and the additional sense code set to INVALID COMMAND OPERATION CODE. 
During the investigation of this more duplicate wording was found in subclause 5.38 WRITE SAME (16) 
command. This duplication wording that needs to be deleted is: 

If the P_TYPE bit is set to one in the READ CAPACITY (16) parameter data (see 5.13), the device 
server shall terminate the command with CHECK CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to INVALID COMMAND OPERATION CODE 
In both cases the duplicate wording should have been removed as part of T10/05-156 revision 7. 

Based on the following 1/26/2007 E-mail from Rob Elliott editorial changes were made as recommended in 
the e-mail. The only recommend change not made was to change ORWRITE to ORWRITE (16). Instead all 
the ORWRITE (16)s were changed to ORWRITE. 

1) On page 55, this text needs small caps and the table references need to be fixed: 

The device server shall: 

a) check protection information read from the medium based on the ORPROTECT field as 
described in tableyy2; and 

b) check protection information transferred from the data-out buffer based on the ORPROTECT field 
as described in table yy3. 

2) In table 3 (reservations), on page 29, and on page 30, ORWRITE s/b ORWRITE (16) 

3) In the table of tables on page xiii, the prevent field doesn't show up in small caps like the others. 

4) On page 34 and 35, several of the equations are truncated on the left and right. The reason is the font 
size grew - the Equation format or character format is messed up on those lines. 

Based on the following 2/8/2007 emails from Dave Peterson and Rob Elliott pointing out a badly worded 
sentence that sentence was corrected. 

Dave Peterson: 

Sentence in question: 

Subclause 5.2.2.3 first paragraph, first sentence on physical page 52: 

“When the SI bit is set to one, the device server need not write the initialization pattern over the header 
and other header and other parts of the medium not previously accessible to the application client.” 

The extra “...and other header...” appears odd. Please clarify. 

Rob Elliott: 

I agree with David's fix. 

Based on the following email from Doug Gilbert received on 2/23/2007 I added in cross-references to the 
footnote in table 84. The cross-references were added to all the yes terms in the 3rd column. 

George, you should delete the spurious “and other header” words from the SI bit paragraph SBC-3. That 
was broken in sbc2r12 while incorporating editor's meeting comments to fix a parenthetical expression 
without an e.g. or i.e. 
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In section 5.35 on WRITE LONG(IO) there is table 84 which has a footnote “a”. It is hanging because 
there 

seems nothing in the main table it refers to. My guess is that it refers to the third column header which 
starts “More than one logical block...”. 

Incorporated the following proposals: 

a) 07-1 lOrO - Update Block Limits VPD Page for ORWRITE; and 

b) 07-113r0 - Maximum transfer sizes for XPWRITE XDWRITE XDREAD PRE-FETCH. 

R.12 Revision 10 (17 May 2007) 

Incorporated the following proposals: 

a) 07-203r0 - SBC-3 SPC-4 Block Device Characteristics VPD page and medium rotation rate field; and 

b) 07-208r0 - SBC-3 Rename field in READ CAPACITY(16) parameter data. 

R.13 Revision 11 (19 July 2007) 

All mode page format tables have been updated to include the SubPage Format (SPF) bit. 

Incorporated the following proposals: 

a) 07-257r1 - Prohibited needed as a keyword in SPC-4; 

b) 07-271 rl - SBC-3, Clarifications for Background Scan Results log page; 

c) 07-281 rl - SPC-4, SBC-3, #Except INQUIRY, REPORT LUNS, and REQUEST SENSE#; and 

d) 07-302M - SBC-3 WRITE LONG Additional Sense code option to support SAT-2. 

Based on the following email from Rob Elliott received on 5/16//2007: 

1. SBC-3 uses both “media access commands” (from changes made in the DIF area) and “medium access 
commands.” SBC-2 only used “medium access commands.” 

I changed all the “media access commands” to “medium access commands”. 

As a result of 07-271 references to generic fields (e.g., operation code field, page code field, page length 
field) were added under the tables where those fields were defined. 

R.14 Revision 12 (11 November 2007) 

Incorporated the following proposals: 

a) 07-472r0 - Reporting nominal form factor; 

b) 07-447r1 - Read-Write Error Recovery clarifications; and 

c) 07-481 rl - Mention that DIF equals protection information. 

Made editorial changes based on the following email received from Rob Elliott on 7/24/2007 
You added wording like this to many sections: 

“The OPERATION CODE field is defined in SPC-4 shall be set to the value defined in table 72." but 
“shall” needs to be “and shall”. 

I see a few that are broken, though: After table 81, it points to table 72. After table 91, it points to table 
90. 

The wording for SPF bit in the mode pages: 

“A SubPage Format (SPF) bit set to zero indicates that the page_0 mode page format is being used (see 
SPC-4).” should probably be: 

“The SubPage Format (SPF) bit is defined in SPC-4 and shall be set to the value defined in table 
xx.”xx.”” (probably combined with the PAGE CODE sentence in all cases) 

Table 102, bytes 4-19 - parameters s/b parameter (there's only one) 

Table 104 - add (MSB)/(LSB) on the last field 

Table 112 - in the sentence after this table, the period is on the wrong line. 

Table 113, 115 - change 3h to 03h 

Editor's note 1: Either that proposal or the editor deleted the wrong line from SBC-2 when obsoleting 
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linked commands. It should just be “CONDITION MET” not “INTERMEDIATE-CONDITION MET”. See 
SBC-2's original wording - the LINK bit set to zero sentences are the ones that should have remained. 
Added the control byte reference to SAM-4 for all the CDBs. 

Made editorial changes as noted in the following email received from Gerry Houlder on 11/06/2007: 

This inconsistent behavior was noted by an engineer at Seagate while reviewing Protection Information 
behavior in SBC-3. It would seem to be more appropriate to call out 05/24 sense instead of 05/20 to be 
consistent with products that report 05/24 for reserved fields. 

R.15 Revision 13 (24 January 2008) 

Made all binary and hexadecimal numbers have a consistent format, separating groups of four digits with 
underscores. Changed the conventions clause (see clause 3.4) to define this format. 

Incorporated the following proposals: 

a) 07-451 rl - WRITE LONG COR_DIS and WRJJNCOR interaction; 

b) 07-454r5 - Capability based Command Security; 

c) 07-459r4 - Unit attention condition queuing; 

d) 08-041 rl - Use period as decimal separator in T10 standards; 

Made editorial changes as noted in the following email received from Rob Elliott on 01/03/2008: 

- add the subpage code column to the table of log page codes 

- add OOh/FFh as Supported Log Pages and Subpages to the table of log page codes 

- add 01h-3Eh/FFh as Supported Subpages to the table of log page codes 

- add 18h/00h-3Eh as Protocol Specific Port log pages to the table of log page codes 

- add the DS bit and SPF bit (0b) to byte 0 of any log page definitions 

- add the SUBPAGE CODE field (OOh) to byte 1 of any log page definitions 

- make sure the command set table agrees with the SPC-4 annex about the page names, reserved and 
vendor-specific ranges, etc. 

R.16 Revision 14 (20 March 2008) 

Incorporated the following proposals: 

a) 08-139r1 - START STOP UNIT command additions. 

Made the editorial change in 4.16 based on an email from Fred Knight: changed “idle” to “standby” in list item 
(C) in the bulleted list for how to process a REQUEST SENSE command while in the standby power condition. 

Updated the definition of the PREVENT ALLOW MEDIUM REMOVAL command to be as proposed in 
05-317r3 based on emails from Rob Elliott. 

Made other editorial changes as denoted by change bars, including: 

- added definitions for device server, l_T nexus, logical unit, SCSI target device, and unit attention 
condition 

- added requirement that, if the medium in a direct-access block device is removable, and the medium is 
removed, then the device server shall establish a unit attention condition 

Made other minor editorial and formatting changes not indicated by change bars. 

R.17 Revision 15 (15 May 2008) 

Incorporated the following proposals: 

a) 08-156r2 -Non-volatile cache becoming volatile. 

Made other minor editorial and formatting changes not indicated by change bars. 
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R.18 Revision 16 (25 August 2008) 

Incorporated the following proposals: 

a) 08-116r3 - SBC-3 SPC-4: Protection Type 3 Reference Tag Clarification 

Based on an email exchange between Mark Evans and Rob Elliott, changed the following sentence in 4.9 
Medium defects from, “During a self-test operation (see SPC-4), the device server shall ignore pseudo 
unrecoverable errors with correction disabled and shall process the pseudo unrecoverable errors with 
correction disabled.” to “During a self-test operation (see SPC-4), the device server shall ignore pseudo 
unrecoverable errors with correction disabled and shall process the pseudo unrecoverable errors with 
correction enabled.” 

The conventions subclause was updated to include the latest descriptions of the conventions for lettered and 
numbered lists. 

The definition for how a range of numeric values are represented in this standard was added, and the attempt 
was made to find all instances of “through”, and other representations where they were used to represent 
a range of numbers and replaced each instance with “to” to conform to this definition. 

Other minor editorial and formatting changes were made that are not indicated by change bars. 
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Introduction 

The standard is organized as follows: 

Clause 1 (Scope) describes the relationship of this standard to the SCSI family of standards. 

Clause 2 (Normative References) provides references to other standards and documents. 

Clause 3 (Definitions, symbols, abbreviations, keywords, and conventions) defines terms and 
conventions used throughout this standard. 

Clause 4 (Direct-access block device type model) provides an overview of the direct-access block 
device type and the command set. 

Clause 5 (Commands for direct-access block devices) defines commands specific to direct-access block 
devices. 

Clause 6 (Parameters for direct-access block devices) defines diagnostic pages, mode parameters and 
pages, log pages, and VPD pages specific to direct-access block devices. 

Informative Annex A (Numeric order codes) summarizes service action assignments for variable-length 
commands and commands using the SERVICE ACTION IN and SERVICE ACTION OUT 
operation codes. 

Informative Annex B (XOR command examples) provides examples of XOR command usage. 

Informative Annex C (CRC example in C) provides example C code for the protection information CRC. 
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AMERICAN NATIONAL STANDARD 


BSR INCITS.xxx:200x 


American National Standard 
for Information Technology - 


SCSI Block Commands - 3 (SBC-3) 

1 Scope 

This standard defines the command set extensions to facilitate operation of SCSI direct-access block devices. 
The clauses of this standard, implemented in conjunction with the applicable clauses of SPC-4, fully specify 
the standard command set for SCSI direct-access block devices. 

The objective of this standard is to: 

a) permit an application client to communicate over a SCSI service delivery subsystem with a logical unit 
that declares itself to be a direct-access block device in the peripheral device type field of the 
standard INQUIRY data (see SPC-4); and 

b) define commands unique to the direct-access block device type. 

Figure 1 shows the relationship of this standard to the other standards and related projects in the SCSI family 
of standards. 


SCSI Architecture Model 
(SAM-4) 


Device-type specific command sets 
(e.g., SES-2, SMC-2, this standard) 

Primary command set 
(shared for all device types) 
(SPC-4) 



SCSI transport protocols 
(e.g., SAS-2, FCP-4) 



Interconnects 

(e.g., SAS-2, Fibre Channel) 


Figure 1 — SCSI document relationships 

Figure 1 is intended to show the general relationship of the documents to one another, and is not intended to 
imply a relationship such as a hierarchy, protocol stack, or system architecture. 

The set of SCSI standards specifies the interfaces, functions, and operations necessary to ensure 
interoperability between conforming SCSI implementations. This standard is a functional description. 
Conforming implementations may employ any design technique that does not violate interoperability. 

This standard makes obsolete the following concepts from previous standards: 
a) linked commands. 
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2 Normative References 

2.1 Normative references overview 

The following standards contain provisions that, by reference in the text, constitute provisions of this standard. 
At the time of publication, the editions indicated were valid. All standards are subject to revision, and parties to 
agreements based on this standard are encouraged to investigate the possibility of applying the most recent 
editions of the standards listed below. 

Copies of the following documents may be obtained from ANSI: 

a) approved ANSI standards; 

b) approved and draft international and regional standards (e.g., ISO, IEC, CEN/CENELEC, ITU-T); and 

c) approved and draft foreign standards (e.g., BSI, JIS, and DIN). 

For further information, contact ANSI Customer Service Department at 212-642-4900 (phone), 212-302-1286 
(fax) or via the World Wide Web at http://www.ansi.org. 

Additional availability contact information is provided below as needed. 

Table 1 lists standards bodies and their web sites. 


Table 1 — Standards bodies 


Abbreviation 

Standards body 

Web site 

ANSI 

American National Standards Institute 

http://www.ansi.org 

BSI 

British Standards Institution 

http://www.bsi-global.com 

CEN 

European Committee for Standardization 

http://www.cenorm.be 

CENELEC 

European Committee for Electrotechnical 

Standardization 

http://www.cenelec.org 

DIN 

German Institute for Standardization 

http://www.din.de 

IEC 

International Engineering Consortium 

http://www.iec.ch 

IEEE 

Institute of Electrical and Electronics Engineers 

http://www.ieee.org 

INCITS 

International Committee for Information Technology 
Standards 

http://www.incits.org 

ISO 

International Standards Organization 

http://www.iso.ch 

ITI 

Information Technology Industry Council 

http://www.itic.org 

ITU-T 

International Telecommunications Union 
Telecommunications Standardization Sector 

http://www.itu.int 

JIS 

Japanese Industrial Standards Committee 

http://www.jisc.org 

T10 

INCITS T10 Committee - SCSI storage interfaces 

http://www.t10.org 

Til 

INCITS Til Committee - Fibre Channel interfaces 

http://www.t11.org 

T13 

INCITS T13 Committee - ATA storage interface 

http://www.t13.org 


2.2 Approved references 

At the time of publication, the following referenced standards were approved. 

ISO/IEC 14776-342, SCSI-3 Controller Commands - 2 (SCC-2 )(ANSI INCITS 318-1998) 
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2.3 References under development 

At the time of publication, the following referenced standards were still under development. For information on 
the current status of the documents, or regarding availability, contact the relevant standards body as indicated. 

ISO/IEC 14776-414, SCSI Architecture Model - 4 (SAM-4) standard (T10/1638-D) 

ISO/I EC 14776-454, SCSI Primary Commands - 4 (SPC-4) standard (T10/1731-D) 

ISO/IEC 14776-352, SCSI Media Changer Commands - 2 (SMC-2) standard (T10/1383-D) 

ISO/IEC 14776-xxx, SCSI Multimedia Commands - 6 (MMC-6) standard (T10/1836-D) 

ISO/IEC 14776-372, SCSI Enclosure Services - 2 (SES-2) standard (T10/1559-D) 

NOTE 1 - For more information on the current status of the document, contact the INCUS Secretariat at 
202-737-8888 (telephone), 202-638-4922 (fax) or via Email at incits@itic.org. To obtain copies of this 
document, contact Global Engineering at 15 Inverness Way East Englewood, CO 80112-5704 at 
800-854-7179 (telephone), 303-792-2181 (telephone), or 303-792-2192 (fax). 
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3 Definitions, symbols, abbreviations, keywords, and conventions 

3.1 Definitions 

3.1.1 additional sense code: A combination of the additional sense code field and the additional sense 
code qualifier field in the sense data. See SPC-4. 

3.1.2 application client: An object that is the source of SCSI commands. See SAM-4. 

3.1.3 byte: A sequence of eight contiguous bits considered as a unit. 

3.1.4 cache: A temporary and often volatile data storage area outside the area accessible by application 
clients that may contain a subset of the data stored in the non-volatile data storage area. 

3.1.5 check data: Information contained within a redundancy group (see 3.1.48) that may allow lost or 
destroyed XOR-protected data (see 3.1.61) to be recreated. 

3.1.6 command: A request describing a unit of work to be performed by a device server. See SAM-4. 

3.1.7 command descriptor block (CDB): The structure used to communicate commands from an 
application client to a device server. See SPC-4. 

3.1.8 cyclic redundancy check (CRC): An error checking mechanism that checks data integrity by 
computing a polynomial algorithm based checksum. See 4.17.4. 

3.1.9 data defect list (DLIST): A list of defects sent by the application client to the device server during a 
FORMAT UNIT command. See 4.9. 

3.1.10 data-in buffer: The buffer identified by the application client to receive data from the device server 
during the processing of a command. See SAM-4. 

3.1.11 data integrity field (DIF): Another term for protection information (see 3.1.42). 

3.1.12 data-out buffer: The buffer identified by the application client to supply data that is sent from the 
application client to the device server during the processing of a command. See SAM-4. 

3.1.13 default protection information: Values placed into protection information fields if an application 
client does not specify specific protection information values. 

3.1.14 device server: An object within a logical unit (see 3.1.30) that processes SCSI commands and some 
task management functions. See SAM-4. 

3.1.15 device type: The type of device (or device model) implemented by the device server as indicated by 
the peripheral device type field of the standard INQUIRY data. See SPC-4. 

3.1.16 direct-access block device: A device that is capable of containing data stored in logical blocks that 
each have a unique LBA. See 4.1. 

3.1.17 domain: An I/O system consisting of a set of SCSI devices that interact with one another by means of 
a service delivery subsystem. See SAM-4. 

3.1.18 error correcting code (ECC): An error checking mechanism that checks data integrity and enables 
some errors in the data to be corrected. 

3.1.19 exclusive-or (XOR): A Boolean arithmetic function on two binary input values that results in an output 
value of 1 if one and only one of the input values is 1. 
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3.1.20 extent: A fixed set of logical blocks occupying contiguous LBAs on a single logical unit. 

3.1.21 field: A group of one or more contiguous bits, a part of a larger structure such as a CDB (see 3.1.7) or 
sense data (see SPC-4). 

3.1.22 format corrupt: a vendor-specific condition in which the application client may not be able to perform 
read operations, write operations, or verify operations. See 4.7. 

3.1.23 grown defect list (GLIST): All defects sent by the application client to the device server. See 4.9. 

3.1.24 hard reset: A condition resulting from the events defined by SAM-4 in which the SCSI device 
performs the hard reset operations described in SAM-4, this standard, and other applicable command 
standards (see table 13 in 5.1). 

3.1.25 l_T nexus: A relationship between a SCSI initiator port and a SCSI target port (see SAM-4). 

3.1.26 l_T nexus loss: A condition resulting from the events defined by SAM-4 in which the SCSI device 
performs the I T nexus loss operations described in SAM-4, this standard, and other applicable command 
standards (see table 13 in 5.1). 

3.1.27 logical block: A set of data bytes accessed and referenced as a unit. See 4.4. 

3.1.28 logical block address (LBA): The value used to reference a logical block (see 4.4). 

3.1.29 logical block length: The number of bytes of user data in a logical block (see 4.4). 

3.1.30 logical unit: An externally addressable entity within a SCSI target device (see 3.1.49) that 
implements a SCSI device model and contains a device server. See SAM-4. 

3.1.31 logical unit certification list (CLIST): Defects detected by the device server during an optional 
certification process performed during the FORMAT UNIT command. See 4.9. 

3.1.32 logical unit reset: A condition resulting from the events defined by SAM-4 in which the logical unit 
performs the logical unit reset operations described in SAM-4, this standard, and other applicable command 
standards (see table 13 in 5.1). 

3.1.33 media: Plural of medium. 

3.1.34 medium: The material on which data is stored (e.g., a magnetic disk). 

3.1.35 non-volatile cache: Cache that retains data through power cycles. 

3.1.36 non-volatile medium: A physical storage medium that retains data written to it for subsequent read 
operations through power cycles (e.g., a disk within a device that stores data as magnetic field changes that 
do not require device power to exist). 

3.1.37 physical block: A set of data bytes accessed as a unit by the device server. See 4.5. 

3.1.38 physical block length: The number of bytes of user data in a physical block (see 4.5). 

3.1.39 power cycle: Power being removed followed by power being applied to a SCSI device. 

3.1.40 power on: A condition resulting from the events defined by SAM-4 in which the SCSI device performs 
the power on operations described in SAM-4, this standard, and other applicable command standards (see 
table 13 in 5.1). 

3.1.41 primary defect list (PLIST): The list of defects that are considered permanent defects. See 4.9. 
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3.1.42 protection information: Fields appended to each logical block that contain a cyclic redundancy 
check (CRC), an application tag, and a reference tag. See 4.17. 

3.1.43 pseudo read data: Data that is transferred by a device server based on the setting of the RC bit or the 
tb bit in the Read-Write Error mode page (see 6.3.5) in order to maintain a continuous flow of data or to 
transfer the amount of data requested for a command even though an unrecovered read error (see 3.1.56) 
occurred while the device server was processing the command. Pseudo read data may be erroneous or 
fabricated by the device server (e.g., data already in a buffer or any other vendor-specific data). 

3.1.44 pseudo unrecovered error: A simulated error (e.g., created by a WRITE LONG command (see 5.35 
and 5.37)) for which a device server reports that it is unable to read or write a logical block, regardless of 
whether the data on the medium is valid, recoverable, or unrecoverable. 

3.1.45 pseudo unrecovered error with correction enabled: A pseudo unrecovered error (see 3.1.44) for 
which a device server performs the maximum error recovery as specified in the Read-Write Error Recovery 
mode page (see 6.3.5). See 4.14.2. 

3.1.46 pseudo unrecovered error with correction disabled: A pseudo unrecovered error (see 3.1.44) for 
which a device server performs no error recovery. See 4.14.2. 

3.1.47 recovered error: An error for which a device server is able to read or write a logical block within the 
recovery limits specified in the Read-Write Error Recovery mode page (see 6.3.5) and the Verify Error 
Recovery mode page (see 6.3.6). 

3.1.48 redundancy group: A grouping of XOR-protected data (see 3.1.61) and associated check data (see 
3.1.5) into a single type of data redundancy (see SCC-2). This standard only supports theXOR (see 3.1.19) 
type of redundancy. 

3.1.49 SCSI target device: A SCSI device containing logical units and SCSI target ports that receives device 
service and task management requests for processing and sends device service and task management 
responses to SCSI initiator devices. See SAM-4. 

3.1.50 sense data: Data describing an error or exceptional condition that a device server delivers to an 
application client in association with CHECK CONDITION status. See SPC-4. 

3.1.51 sense key: The contents of the sense key field in the sense data. See SPC-4. 

3.1.52 status: One byte of response information sent from a device server to an application client upon 
completion of each command. See SAM-4. 

3.1.53 storage array controller: Any combination of an initiator and application clients (see SAM-4) that 
originates SCSI commands, converts input LUNs to output LUNs, and converts input LBAs to output LBAs. A 
storage array controller organizes a group of direct-access block devices into various objects (e.g., 
redundancy groups and volume sets). See SCC-2. 

3.1.54 unit attention condition: A state that a logical unit (see 3.1.30) maintains while the logical unit has 
asynchronous status information to report to the initiator ports associated with one or more I T nexuses (see 
3.1.25). See SAM-4. 

3.1.55 unrecovered error: An error for which a device server is unable to read or write a logical block within 
the recovery limits specified in the Read-Write Error Recovery mode page (see 6.3.5) and the Verify Error 
Recovery mode page (see 6.3.6). 

3.1.56 unrecovered read error: An unrecovered error (see 3.1.55) during a read operation. 

3.1.57 user data: Data contained in logical blocks that is not protection information. 
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3.1.58 volatile cache: Cache that does not retain data through power cycles. 

3.1.59 volatile medium: Medium that does not retain data written to it for a subsequent read operation 
through power cycles (e.g., a silicon memory device that loses data written to it if device power is lost). 

3.1.60 XOR operation: Performing an XOR (see 3.1.19) bitwise on two identical-sized multiple-bit input 
values (e.g., the current value of a logical block and the new value for that logical block). In a storage array 
implementing a redundancy group (see 3.1.48), the XOR operation is used in error correction algorithms and 
may be performed by the storage array controller (see 3.1.53) or by the direct-access block devices (see 
3.1.16). See 4.15. 

3.1.61 XOR-protected data: Logical blocks, including user data and protection information, if any, that are 
part of a redundancy group (see 3.1.48). 

3.2 Symbols and abbreviations 

See table 1 for abbreviations of standards bodies (e.g., ISO). Additional symbols and abbreviations used in 
this standard include: 


Abbreviation 

Meaning 

CDB 

command descriptor block (see 3.1.7) 

CRC 

cyclic redundancy check (see 3.1.8) 

OUST 

logical unit certification list (see 3.1.31) 

DIF 

data integrity field (see 3.1.11) 

DUST 

data defect list (see 3.1.9) 

ECO 

error correcting code (see 3.1.18) 

GUST 

grown defect list (see 3.1.23) 

I/O 

input/output 

LBA 

logical block address (see 3.1.28) 

LSB 

least significant bit 

LUN 

logical unit number 

MMC-6 

SCSI Multimedia Commands - 6 standard 

MSB 

most significant bit 

PLIST 

primary defect list (see 3.1.41) 

SAM-4 

SCSI Architecture Model - 4 standard 

SCSI 

Small Computer System Interface family of standards 

SCC-2 

SCSI-3 Controller Commands - 2 standard 

SES-2 

SCSI Enclosure Services - 2 standard 

SMC-2 

SCSI Media Changer Commands - 2 standard 

SPC-4 

SCSI Primary Commands - 4 standard 

XOR 

exclusive-or (see 3.1.19) 


3.3 Keywords 

3.3.1 expected: A keyword used to describe the behavior of the hardware or software in the design models 
assumed by this standard. Other hardware and software design models may also be implemented. 

3.3.2 ignored: A keyword used to describe an unused bit, byte, word, field or code value. The contents or 
value of an ignored bit, byte, word, field or code value shall not be examined by the receiving SCSI device and 
may be set to any value by the transmitting SCSI device. 


Working Draft SCSI Block Commands - 3 (SBC-3) 



T10/1799-D Revision 16 


25 August 2008 


3.3.3 invalid: A keyword used to describe an illegal or unsupported bit, byte, word, field or code value. 
Receipt of an invalid bit, byte, word, field or code value shall be reported as an error. 

3.3.4 mandatory: A keyword indicating an item that is required to be implemented as defined in this 
standard. 

3.3.5 may: A keyword that indicates flexibility of choice with no implied preference. “May” is equivalent to 
“may or may not”. 

3.3.6 may not: Keywords that indicate flexibility of choice with no implied preference. “May not” is equivalent 
to “may or may not”. 

3.3.7 need not: Keywords indicating a feature that is not required to be implemented. “Need not” is 
equivalent to “is not required to”. 

3.3.8 obsolete: A keyword indicating that an item was defined in prior SCSI standards but has been removed 
from this standard. 

3.3.9 optional: A keyword that describes features that are not required to be implemented by this standard. 
However, if any optional feature defined in this standard is implemented, then it shall be implemented as 
defined in this standard. 

3.3.10 prohibited: A keyword used to describe a feature, function, or coded value that is defined in a a 
non-SCSI standard (i.e., a standard that is not a member of the SCSI family of standards) to which this 
standard makes a normative reference where the use of said feature, function, or coded value is not allowed 
for implementations of this standard. 

3.3.11 reserved: A keyword referring to bits, bytes, words, fields and code values that are set aside for future 
standardization. A reserved bit, byte, word or field shall be set to zero, or in accordance with a future 
extension to this standard. Recipients are not required to check reserved bits, bytes, words or fields for zero 
values. Receipt of reserved code values in defined fields shall be reported as an error. 

3.3.12 restricted: A keyword referring to bits, bytes, words, and fields that are set aside for use in other SCSI 
standards. A restricted bit, byte, word, or field shall be treated as a reserved bit, byte, word or field for the 
purposes of the requirements defined in this standard. 

3.3.13 shall: A keyword indicating a mandatory requirement. Designers are required to implement all such 
mandatory requirements to ensure interoperability with other products that conform to this standard. 

3.3.14 should: A keyword indicating flexibility of choice with a strongly preferred alternative. “Should” is 
equivalent to the phrase “it is strongly recommended.” 

3.3.15 vendor-specific: Something (e.g., a bit, field, or code value) that is not defined by this standard and 
may be used differently in various implementations. 

3.4 Conventions 

3.4.1 Editorial conventions 

Certain words and terms used in this standard have a specific meaning beyond the normal English meaning. 
These words and terms are defined either in this clause or in the text where they first appear. 

Names of commands, status codes, sense keys, and additional sense codes are in all uppercase (e.g., 
REQUEST SENSE). 

Names of fields and state variables are in small uppercase (e.g. name). When a field or state variable name 
contains acronyms, uppercase letters may be used for readability. Normal case is used when the contents of 
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a field or state variable are being discussed. Fields or state variables containing only one bit are usually 
referred to as the name bit instead of the name field. 

Normal case is used for words having the normal English meaning. 

Notes do not constitute any requirements for implementers. 

3.4.2 Numeric conventions 

A binary number is represented in this standard by any sequence of digits comprised of only the 
Western-Arabic numerals 0 and 1 immediately followed by a lower-case b (e.g., 0101b). Underscores are 
included between characters in binary number representations to increase readability or delineate field 
boundaries (e.g., 0_0101_101 Ob). 

A hexadecimal number is represented in this standard by any sequence of digits comprised of only the 
Western-Arabic numerals 0 through 9 and/or the upper-case English letters A through F immediately followed 
by a lower-case h (e.g., FA23h). Underscores are included in hexadecimal number representations to 
increase readability or delineate field boundaries (e.g., B_FD8C_FA23h). 

A decimal number is represented in this standard by any sequence of digits comprised of only the 
Western-Arabic numerals 0 through 9 not immediately followed by a lower-case b or lower-case h (e.g., 25). 

This standard uses the following conventions for representing decimal numbers: 

a) the decimal separator (i.e., separating the integer and fractional portions of the number) is a period; 

b) the thousands separator (i.e., separating groups of three digits in a portion of the number) is a space; 
and 

c) the thousands separator is used in both the integer portion and the fraction portion of a number. 
Table 2 shows some examples of decimal numbers represented using various conventions. 


Table 2 — Numbering convention examples 


French 

English 

This standard 

0,6 

0.6 

0.6 

3,141 592 65 

3.14159265 

3.141 592 65 

1 000 

1,000 

1 000 

1 323 462,95 

1,323,462.95 

1 323 462.95 


A decimal number represented in this standard with an overline over one or more digits following the decimal 
point is a numb er where the overlined digits are infinitely repeating (e.g., 666.6 means 666.666 666... or 
666 2/3, and 12.142 857 means 12.142 857 142 857... or 12 1/7). 

A range of numeric values may be represented in this standard in the form “a to z”, where a is the first value 
included in the range, all values between a and z are included in the range, and z is the last value included in 
the range (e.g., the representation “Oh to 3h” includes the values Oh, 1 h, 2h, and 3h). 

3.4.3 Lists conventions 

3.4.3.1 Lists conventions overview 

Lists are introduced by a complete grammatical proposition followed by a colon and completed by the items in 
the list. 

Each item in a list is preceded by an identification with the style of the identification being determined by 
whether the list is an ordered list or an unordered list. 

If the item in a list is not a complete sentence, then the first word in the item is capitalized. If the item in a list 
is a complete sentence, then the first word in the item is capitalized, 
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Each item in a list ends with a semicolon, except the last item, which ends in a period. The next to the last 
entry in a list ends with a semicolon followed by an “and” or an “or” (i.e., and”, or or”). The “and” is 
used if all the items in the list are required. The “or” is used if only one or more items in the list are required. 

3.4.3.2 Unordered lists 

An unordered list is one in which the order of the listed items in unimportant (i.e., it does not matter where in 
the list an item occurs as all items have equal importance). Each list item starts with a lower case letter or an 
uppercase letter followed by a close parenthesis. The following is an example of an unordered list in which 
there is no ordered relationship between the colors named: 

a) red (i.e., one of the following colors): 

A) crimson; or 

B) amber; 

b) blue; or 

c) green. 

3.4.3.3 Ordered lists 

An ordered list is one in which the order of the listed items is important (i.e., item n is required before item 
n+1). Each listed item starts with an Western-Arabic numeral followed by a close parenthesis. The following is 
an example of an ordered list in which the order by which a page is to be read is specified: 

1) top of the page; 

2) middle of the page; and 

3) bottom of the page. 

3.4.4 Precedence 

In the event of conflicting information the precedence for requirements defined in this standard is: 

1) text; 

2) tables; then 

3) figures. 


10 


Working Draft SCSI Block Commands - 3 (SBC-3) 



25 August 2008 


T10/1799-D Revision 16 


4 Direct-access block device type model 

4.1 Direct-access block device type model overview 

SCSI devices that conform to this standard are referred to as direct-access block devices. This includes the 
category of logical units commonly referred to as rigid disks and removable rigid disks. MMC-4 is typically 
used by CD-ROM devices. 

This standard is intended to be used in conjunction with SAM-4, SPC-4, SCC-2, SES-2, and SMC-2. 

Direct-access block devices store data for later retrieval in logical blocks. Logical blocks contain user data, 
may contain protection information accessible to the application client, and may contain additional information 
not normally accessible to the application client (e.g., an ECC). The number of bytes of user data contained in 
each logical block is the logical block length. The logical block length is greater than or equal to one byte and 
should be even. Most direct-access block devices support a logical block length of 512 bytes and some 
support additional logical block lengths (e.g., 520 or 4096 bytes). The logical block length does not include the 
length of protection information and additional information, if any, that are associated with the logical block. 
The logical block length is the same for all logical blocks on the medium. 

Each logical block is stored at a unique LBA, which is either four bytes (i.e., a short LBA) or eight bytes (i.e., a 
long LBA) in length. The LBAs on a logical unit shall begin with zero and shall be contiguous up to the last 
logical block on the logical unit. An application client uses commands performing write operations to store 
logical blocks and commands performing read operations to retrieve logical blocks. A write operation causes 
one or more logical blocks to be written to the medium. A read operation causes one or more logical blocks to 
be read from the medium. A verify operation confirms that one or more logical blocks were correctly written 
and are able to be read without error from the medium. 

Logical blocks are stored by a process that causes localized changes or transitions within a medium. The 
changes made to the medium to store the logical blocks may be volatile (i.e., not retained through power 
cycles) or non-volatile (i.e., retained through power cycles). The medium may contain vendor-specific 
information that is not addressable through an LBA. Such data may include defect management data and 
other device management information. 

4.2 Media examples 

4.2.1 Media examples overview 

Examples of types of media used by the direct-access block device are: 

a) rotating media (see 4.2.2); and 

b) memory media (see 4.2.3). 

Other types of media are possible. 

4.2.2 Rotating media 

The typical application of a direct-access block device is a magnetic disk device. The medium is a spinning 
disk with a magnetic material that allows flux changes to be induced and recorded. An actuator positions a 
read-write head radially across the spinning disk, allowing the device to randomly read or write the information 
at any radial position. Data is stored by using the write portion of the head to record flux changes and is read 
by using the read portion of the head to read the recorded data. 

The circular path followed by the read-write head at a particular radius is called a track. The track is divided 
into sectors each containing blocks of stored data. If there are more than one disk spinning on a single axis 
and the actuator has one or more read-write heads to access the disk surfaces, the collection of tracks at a 
particular radius is called a cylinder. 

A logical block is stored in one or more sectors, or a sector may store more than one logical block. Sectors 
may also contain information for accessing, synchronizing, and protecting the integrity of the logical blocks. 
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A rotating media-based direct-access block device is ready when the disks are rotating at the correct speed 
and the read-write circuitry is powered and ready to access the data, and may require a START STOP UNIT 
command (see 5.19) to bring the logical unit to the ready state. 

Rotating media-based direct-access block device are usually non-volatile. 

The defect management scheme of a disk device may not be discernible through this command set, though 
some aspects (see 4.9) may be accessible to the application client with the READ LONG commands and the 
WRITE LONG commands (see 5.16, 5.17, 5.35, and 5.36). 

4.2.3 Memory media 

Memory media is based on solid state random access memories (RAMs) (e.g., static RAM (SRAM), dynamic 
RAM (DRAM), magnetoresistive RAM (MRAM), ferroelectric RAM (FeRAM), or flash memory). Memory 
media-based direct-access block devices may be used for fast-access storage. 

A memory media-based direct-access block device is ready after power on, and does not require a START 
STOP UNIT command (see 5.19) to bring the logical unit to a ready state. 

These logical units may be non-mechanical, and therefore logical blocks may be accessed with similar access 
times regardless of their location on the medium. Memory media-based direct-access block devices may store 
less data than disks or tapes, and may be volatile. 

The defect management scheme (e.g., ECC bytes) (see 4.9) may be accessible to the application client with 
the READ LONG commands and the WRITE LONG commands (see 5.16, 5.17, 5.35, and 5.36). 

Memory media may be volatile (e.g., SRAM or DRAM) or non-volatile (e.g., SRAM or DRAM with battery 
backup, MRAM, FeRAM, or flash memory). 

4.3 Removable medium 

4.3.1 Removable medium overview 

The medium may be removable or non-removable. The removable medium may be contained within a 
cartridge or jacket to prevent damage to the recording surfaces. 

A removable medium has an attribute of being mounted or unmounted on a suitable transport mechanism in a 
direct-access block device. A removable medium is mounted when the direct-access block device is capable 
of performing write, read, and verify operations to the medium. A removable medium is unmounted at any 
other time (e.g., during loading, unloading, or storage). 

An application client may check whether a removable medium is mounted by issuing a TEST UNIT READY 
command (see SPC-4). A direct-access block device containing a removable medium may not be accessible 
for write, read, and verify operations until it receives a START STOP UNIT command (see 5.19). 

If the direct-access block device implements cache, either volatile or non-volatile, it ensures that all logical 
blocks of the medium contain the most recent user data and protection information, if any, prior to permitting 
unmounting of the removable medium. 

If the medium in a direct-access block device is removable, and the medium is removed, then the device 
server shall establish a unit attention condition with the additional sense code set to the appropriate value 
(e.g., NOT READY TO READY CHANGE, MEDIUM MAY HAVE CHANGED). 

The PREVENT ALLOW MEDIUM REMOVAL command (see 5.6) allows an application client to restrict the 
unmounting of the removable medium. This is useful in maintaining system integrity. 

If the application client issues a START STOP UNIT command to eject the removable medium, and the 
direct-access block device is prevented from unmounting by the PREVENT ALLOW MEDIUM REMOVAL 
command, the START STOP UNIT command is rejected by the device server. 
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4.3.2 Removable medium with an attached media changer 

When a direct-access block device is served by an attached media changer, control over a medium transport 
element may be accomplished using media changer commands (see SMC-2) sent to the direct-access block 
device type logical unit. 

The direct-access block device indicates its ability to support these commands by setting the mchngr bit to 
one in its standard INQUIRY data (see SPC-4). A mchngr bit set to one indicates that the MOVE MEDIUM 
ATTACHED and READ ELEMENT STATUS ATTACHED commands (see SMC-2) are supported. The logical 
unit may require a MODE MEDIUM ATTACHED command (see SMC-2) to become ready. 

4.4 Logical blocks 

Logical blocks are stored on the medium along with additional information that the device server uses to 
manage storage and retrieval. The format of the additional information is defined by other standards or is 
vendor-specific and is hidden from the application client during normal read, write, and verify operations. This 
additional information may be used to identify the physical location of the blocks of data, the address of the 
logical block, and to provide protection against the loss of user data and protection information, if any (e.g., by 
containing ECC bytes). 

The first LBA is zero. The last LBA is [n-1], where [n] is the number of logical blocks on the medium accessible 
by the application client. The READ CAPACITY (10) parameter data (see 5.12.2 and 5.13.2) returned 
logical block address field indicates the value of [n-1]. 

LBAs are no larger than 8 bytes. Some commands support only 4-byte (i.e., short) logical block address 
fields (e.g., READ CAPACITY (10), READ (10), and WRITE (10)). If the capacity exceeds that accessible with 
short LBAs, then the device server returns a capacity of FFFF_FFFFh in response to a READ CAPACITY (10) 
command, indicating that: 

a) the application client should enable descriptor format sense data (see SPC-4) in the Control mode 
page (see SPC-4) and in any REQUEST SENSE commands (see SPC-4) it sends; and 

b) the application client should use commands with 8-byte logical block address fields (e.g., READ 
CAPACITY (16), READ (16), and WRITE (16)). 

NOTE 2 - If a command with a 4-byte LOGICAL BLOCK ADDRESS field accesses logical blocks beyond LBAs 
FFFF_FFFFh and fixed format sense data is used, there is no field in the sense data large enough to report 
the LBA of an error (see 4.14). 

If a command is received that references or attempts to access a logical block not within the capacity of the 
medium, then the device server terminates the command with CHECK CONDITION status with the sense key 
set to ILLEGAL REQUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF 
RANGE. The device server may terminate the command before processing or after the device server has 
transferred some or all of the data. 

The number of bytes of user data contained in a logical block is the logical block length. The parameter data 
returned by the device server in response to a READ CAPACITY command (see 5.12) describes the logical 
block length that is used on the medium. The mode parameter block descriptor (see 6.3.2) is used by an 
application client to change the logical block length in direct-access block devices that support changeable 
logical block lengths. The logical block length should be used to determine does not include the length of 
protection information and additional information, if any. 

The location of a logical block on the medium is not required to have a relationship to the location of any other 
logical block. However, in a typical direct-access block device, the time to access a logical block at LBA [x+1] 
after accessing LBA [x] is often less than the time to access some other logical block. The time to access the 
logical block at LBA [x] and then the logical block at LBA [x+1] need not be less than time to access LBA [x] 
and then LBA [x+100]. The READ CAPACITY command issued with a pmi bit set to one may be useful in 
determining where longer access times occur. 
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4.5 Physical blocks 

A physical block is a set of data bytes on the medium accessed by the device server as a unit. A physical 
block may contain: 

a) a portion of a logical block (i.e., there are multiple physical blocks in the logical block)(e.g., a physical 
block length of 512 bytes with a logical block length of 2 048 bytes); 

b) a single complete logical block; or 

c) more than one logical block (i.e., there are multiple logical blocks in the physical block)(e.g., a 
physical block length of 4 096 bytes with a logical block length of 512 bytes). 

Each physical block includes additional information not normally accessible to the application client (e.g., an 
ECC) that the device server uses to manage storage and retrieval. 

If the device server supports the cor_dis bit and/or the wfmjncor bit in a WRITE LONG command (see 5.35 
and 5.36), then the device server shall have the capability of marking individual logical blocks as containing 
pseudo uncorrectable errors with correction enabled (see 3.1.45) or with correction disabled (see 3.1.46). 

Logical blocks may or may not be aligned to physical block boundaries. A mechanism for establishing the 
alignment is not defined by this standard. 
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Figure 2 shows examples of logical blocks and physical blocks, where LBA 0 is aligned to a physical block 
boundary. 

LOGICAL BLOCKS PER PHYSICAL BLOCK field Set to Oh 
(indicating one or more physical blocks per logical block): 


4 physical blocks per logical block: 


LBA 0 

LBA 1 

PB PB PB PB 

PB PB PB PB 


3 physical blocks per logical block: 


LBA 0 

LBA 1 

LBA 2 

PB PB PB 

PB PB PB 

PB PB PB 


2 physical blocks per logical block: 



LBA 1 

LBA 2 

LBA 3 

LBA 4 

PB PB 

PB PB 

PB PB 

PB PB 

PB PB 


1 physical block per logical block: 


LBA 0 

LBA 1 

LBA 2 

LBA 3 

LBA 4 

LBA 5 

LBA 6 

LBA 7 

LBA 8 

LBA 9 

LBA 10 

PB 

PB 

PB 

PB 

PB 

PB 

PB 

PB 

PB 

PB 

PB 


LOGICAL BLOCKS per physical block field set to a non-zero value 
(indicating more than one logical block per physical block): 


logical blocks per physical block field set to 1h (indicating 2 1 logical blocks per physical block): 



Kev: 

LBA n = logical block with LBA n 
PB = physical block 


Figure 2 — Logical blocks and physical blocks examples 
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Figure 3 shows examples of logical blocks and physical blocks, where various LBAs are aligned to the 
physical block boundaries. 

logical blocks per physical block field set to 1 h (indicating 2 1 logical blocks per physical block): 

LOWEST ALIGNED LOGICAL BLOCK ADDRESS field Set to 0: 


LBA 0 1 LBA 1 

LBA 2 1 LBA 3 

LBA 4 1 LBA 5 

LBA 6 1 LBA 7 

LBA 8 1 LBA 9 

PB 

PB 

PB 

PB 

PB 


LOWEST ALIGNED LOGICAL BLOCK ADDRESS field Set to 1: 


LBA 0 

LBA 1 1 LBA 2 

LBA 3 1 LBA 4 

LBA 5 1 LBA 6 

LBA 7 1 LBA 8 

LBA 9 |LBA 10 

PB 

PB 

PB 

PB 

PB 

PB 


logical blocks per physical block field set to 2h (indicating 2 2 logical blocks per physical block): 
LOWEST ALIGNED LOGICAL BLOCK ADDRESS field Set to 0: 


LBA 0 | LBA 1 | LBA 2 | LBA 3 

LBA 4 | LBA 5 | LBA 6 | LBA 7 

PB 

PB 


LOWEST ALIGNED LOGICAL BLOCK ADDRESS field Set to 1: 


LBA 1 | LBA 2 | LBA 3 | LBA 4 

LBA 5 | LBA 6 | LBA 7 | LBA 8 

PB 

PB 


LOWEST ALIGNED LOGICAL BLOCK ADDRESS field Set to 2: 


| LBA 0 | LBA 1 

LBA 2 | LBA 3 | LBA 4 | LBA 5 

LBA 6 | LBA 7 | LBA 8 | LBA 9 

PB 

PB 

PB 


LOWEST ALIGNED LOGICAL BLOCK ADDRESS field Set to 3: 

I LBA 0 | LBA 1 | LBA 2 

LBA 3 1 LBA 4 | LBA 5 | LBA 6 

LBA 7 | LBA 8 | LBA 9 |LBA10 

PB 

PB 

PB 


Kev: 

LBA n = logical block with LBA n 
PB = physical block 


Figure 3 — Logical block to physical block alignment examples 

When there are more than one logical block per physical block, not all of the logical blocks are aligned to the 
physical block boundaries. When using medium access commands, application clients should: 

a) specify an LBA that is aligned to a physical block boundary; and 

b) access an integral number of physical blocks, provided that the access does not go beyond the last 
LBA on the medium. 

4.6 Ready state 

A direct-access block device is ready when the device server is capable of processing medium access 
commands (i.e., commands that perform read operations, write operations, or verify operations). 

A direct-access block device using removable media is not ready until a volume is mounted and other 
conditions are met (see 4.2). If a direct-access block device is not ready, then the device server shall 
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terminate medium access commands with CHECK CONDITION status with the sense key set to NOT READY 
and the appropriate additional sense code for the condition. 

Some direct-access block devices may be switched from being ready to being not ready by using the START 
STOP UNIT command (see 5.19). An application client may need to issue a START STOP UNIT command 
with a start bit set to one to make a direct-access block device ready. 

4.7 Initialization 

Direct-access block devices may require initialization prior to write, read, and verify operations. This 
initialization is performed by a FORMAT UNIT command (see 5.2). Parameters related to the format (e.g., 
logical block length) may be set with the MODE SELECT command prior to the format operation. Some 
direct-access block devices are initialized by means not specified in this standard. The time when the 
initialization occurs is vendor-specific. 

Direct-access block devices using a non-volatile medium may save the parameters and only need to be 
initialized once. However, some mode parameters may need to be initialized after each logical unit reset. A 
catastrophic failure of the direct-access block device may require the FORMAT UNIT command to be issued. 

Direct-access block devices that use a volatile medium may need to be initialized after each logical unit reset 
prior to the processing of write, read, or verify operations. Mode parameters may also need initialization after 
logical unit resets. 

NOTE 3 - Mode parameter block descriptors read with the MODE SENSE command before a FORMAT UNIT 
completes may contain information that may not reflect the true state of the medium. 

A direct-access block device may become format corrupt after processing a MODE SELECT command that 
changes parameters related to the medium format. During this time, the device server may terminate medium 
access commands with CHECK CONDITION status with the sense key set to NOT READY and the 
appropriate additional sense code for the condition. 

Any time the parameter data to be returned by a device server in response to a READ CAPACITY (10) 
command (see 5.12) or a READ CAPACITY (16) command (see 5.13) changes (e.g., when a FORMAT UNIT 
command or a MODE SELECT command completes changing the number of logical blocks, logical block 
length, protection information, or reference tag ownership values, or when a vendor-specific mechanism 
causes a change), then the device server shall establish a unit attention condition for the SCSI initiator port 
(see SAM-4) associated with each l_T nexus, except the l_T nexus on which the command causing the 
change was received, with the additional sense code set to CAPACITY DATA HAS CHANGED. 

NOTE 4 - Logical units compliant with previous versions of this standard were not required to establish a unit 
attention condition. 

4.8 Write protection 

Write protection prevents the alteration of the medium by commands issued to the device server. Write 
protection is usually controlled by the user of the medium through manual intervention (e.g., mechanical lock) 
or may result from hardware controls (e.g., tabs on the media housing) or software write protection. All 
sources of write protection are independent. When present, any write protection shall cause otherwise valid 
commands that request alteration of the medium to be rejected with CHECK CONDITION status with the 
sense key set to DATA PROTECT. Only when all write protections are disabled shall the device server 
process commands that request alteration of the medium. 

Hardware write protection results when a physical attribute of the drive or medium is changed to specify that 
writing shall be prohibited. Changing the state of the hardware write protection requires physical intervention, 
either with the drive or the medium. If allowed by the drive, changing the hardware write protection while the 
medium is mounted results in vendor-specific behavior that may include the writing of previously buffered data 
(e.g., data in cache). 

Software write protection results when the device server is marked as write protected by the application client 
using the swp bit in the Control mode page (see SPC-4). Software write protection is optional. Changing the 
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state of software write protection shall not prevent previously accepted data (e.g., data in cache) from being 
written to the media. 

The device server reports the status of write protection in the device server and on the medium with the 
device-specific parameter field in the mode parameter header (see 6.3.1). 

4.9 Medium defects 

Any medium has the potential for defects that cause data to be lost. Therefore, each logical block may contain 
additional information that allows the detection of changes to the user data and protection information, if any, 
caused by defects in the medium or other phenomena, and may also allow the data to be reconstructed 
following the detection of such a change (e.g., ECC bytes). 

A defect causes a recovered error (see 3.1.47) if the device server is able to retrieve the data by retrying or 
using the additional information to reconstruct the data. A defect causes an unrecovered error (see 3.1.55) if 
the device server is unable to retrieve the data. 

Direct-access block devices may allow the application client to examine and modify the additional information 
by using the READ LONG commands and the WRITE LONG commands (see 5.16, 5.17, 5.35, and 5.36). The 
application client may use the WRITE LONG commands to alter the additional information to test the defect 
detection logic of the direct-access block device or to emulate a logical block with an unrecovered read error 
when generating a mirror copy. This may induce a recovered error or an unrecovered error. 

Direct-access block devices may allow the application client to use the features of the WRITE LONG 
commands (see 5.35 and 5.36) to: 

a) disable error correction on specific logical blocks or physical blocks; 

b) disable automatic reallocation on specific logical blocks or physical blocks; and 

c) mark specific logical blocks or physical blocks as containing pseudo unrecoverable errors with 
correction enabled or with correction disabled. 

These features provide methods for an application client to prevent logical blocks from being reported as 
information exception conditions and unnecessary reassignments. 

During a self-test operation (see SPC-4), the device server shall ignore pseudo unrecoverable errors with 
| correction disabled and shall process the pseudo unrecoverable errors with correction enabled. See 4.19.1 for 
the rules for background scans. 

Defects may also be detected and managed during processing of a FORMAT UNIT command (see 5.2). The 
FORMAT UNIT command defines four sources of defect information: the PLIST, CLIST, DLIST, and GLIST. 
These defects may be reassigned or avoided during the initialization process so that they do not affect any 
logical blocks. The sources of defect location information (i.e., defects) are defined as follows: 

a) Primary defect list (PLIST). This is the list of defects, which may be supplied by the original manufac¬ 
turer of the device or medium, that are considered permanent defects. The PLIST is located outside 
of the application client accessible logical block space. The PLIST is accessible by the device server 
for reference during the format operation, but it is not accessible by the application client except 
through the READ DEFECT DATA commands (see 5.12 and 5.15). Once created, the original PLIST 
shall not change; 

b) Logical unit certification list (CLIST). This list includes defects detected by the device server during an 
optional certification process performed during the FORMAT UNIT command. This list shall be added 
to the GLIST; 

c) Data defect list (DLIST). This list of defects may be supplied by the application client to the device 
server during the FORMAT UNIT command. This list shall be added to the GLIST; and 

d) Grown defect list (GLIST). The GLIST includes all defects sent by the application client (i.e., the 
DLIST) or detected by the device server (i.e., the CLIST). The GLIST does not include the PLIST. If 
the cmplst bit is set to zero, the GLIST shall include DLlSTs provided to the device server during the 
previous and the current FORMAT UNIT commands. The GLIST shall also include: 

A) defects detected by the format operation during medium certification; 

B) defects previously identified with a REASSIGN BLOCKS command (see 5.18); and 

C) defects previously detected by the device server and automatically reallocated. 
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The direct-access block device may automatically reassign defects if allowed by the Read-Write Error 
Recovery mode page (see 6.3.5). 

Defects may also occur after initialization. The application client issues a REASSIGN BLOCKS command 
(see 5.18) to request that the specified LBA be reassigned to a different part of the medium. This operation 
may be repeated if a new defect appears at a later time. The total number of defects that may be handled in 
this manner is vendor-specific. 

Defect management on direct-access block devices is vendor-specific. Direct-access block devices not using 
a removable medium may optimize the defect management for capacity or performance or both. Some 
direct-access block devices that use a removable medium do not support defect management or use defect 
management that does not impede the ability to interchange the medium. 

4.10 Write failures 

If one or more commands performing write operations are in the task set and are being processed when 
power is lost (e.g., resulting in a vendor-specific command timeout by the application client) or a medium error 
or hardware error occurs (e.g., because a removable medium was incorrectly unmounted), then the data in 
the logical blocks being written by those commands is indeterminate. When accessed by a command 
performing a read or verify operation (e.g., after power on or after the removable medium is mounted), the 
device server may return old data, new data, or vendor-specific data in those logical blocks. 

Before reading logical blocks which encountered such a failure, an application client should reissue any 
commands performing write operations that were outstanding. 

4.11 Caches 

Direct-access block devices may implement caches. A cache is an area of temporary storage in the 
direct-access block device with a fast access time that is used to enhance performance. Cache exists 
separately from the medium and is not directly accessible by the application client. Use of cache for write or 
read operations may reduce the access time to a logical block and increase the overall data throughput. 

Cache stores user data and protection information, if any. 

Cache may be volatile or non-volatile. Volatile caches do not retain data through power cycles. Non-volatile 
cache memories retain data through power cycles. There may be a limit on the amount of time a non-volatile 
cache is able to retain data without power. 

The power, if any, that allows a non-volatile cache to remain non-volatile may become low enough to prevent 
the non-volatile cache from remaining non-volatile for a vendor specific minimum time (e.g., the battery 
voltage becomes too low too sustain cache contents beyond a vendor specific time). If this occurs and the 
Extended INQUIRY Data VPD page (see SPC-4) indicates that the device server contains non-volatile cache 
(i.e., nv_sup bit set to one), then: 

a) if the reporting of informational exceptions control warnings is enabled (i.e., the ewasc bit is set to one 
in the Information Exceptions Control mode page (see SPC-4)), then the device server shall report the 
degraded non-volatile cache as specified in the Information Exceptions Control mode page with an 
additional sense code set to WARNING - DEGRADED POWER TO NON-VOLATILE CACHE; or 

b) if the reporting of informational exceptions control warnings is disabled (i.e., the ewasc bit is set to 
zero in the Information Exceptions Control mode page), then the device server shall establish a unit 
attention condition (see SAM-4) for the initiator port associated with every l_T nexus with the 
additional sense code set to WARNING - DEGRADED POWER TO NON-VOLATILE CACHE. 

Non-volatile caches may become volatile (e.g., battery voltage becomes too low to sustain cache contents 
when power is lost). In this case, read or write operations requested by commands in which the force unit 
access non-volatile cache (fua_nv) bit in the CDB is set to one may bypass the cache resulting in a decrease 
in overall data throughput. 

If a non-volatile cache becomes volatile, then the device server shall set the remaining non-volatile time 
field to zero in the Non-volatile Cache log page (see 6.2.4). 
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If non-volatile cache becomes volatile and the Extended INQUIRY Data VPD page (see SPC-4) indicates that 
the device server contains non-volatile cache (i.e., the nv_sup bit is set to one) then: 

a) if the reporting of informational exceptions control warnings is enabled (i.e., the ewasc bit is set to one 
in the Information Exceptions Control mode page (see SPC-4)), then the device server shall report the 
change in the cache as specified in the Information Exceptions Control mode page with the additional 
sense code set to WARNING - NON-VOLATILE CACHE NOW VOLATILE; or 

b) if the reporting of informational exceptions control warnings is disabled (i.e., the ewasc bit is set to 
zero in the Information Exceptions Control mode page), then the device server shall establish a unit 
attention condition (see SAM-4) for the initiator port associated with every l_T nexus with the 
additional sense code set to WARNING - NON-VOLATILE CACHE NOW VOLATILE. 

If: 

a) a power on or hard reset occurs; 

b) the Extended INQUIRY Data VPD page indicates that the device server contains a non-volatile cache 
(i.e., the nv_sup bit set to one); and 

c) the non-volatile cache is currently volatile, 

then the device server shall establish a unit attention condition for the initiator port associated with every I T 
nexus with the additional sense code set to WARNING - NON-VOLATILE CACHE NOW VOLATILE. 

During read operations, the device server uses the cache to store logical blocks that the application client may 
request at some future time. The algorithm used to manage the cache is not part of this standard. However, 
parameters are provided to advise the device server about future requests, or to restrict the use of cache for a 
particular request. 

During write operations, the device server uses the cache to store data that is to be written to the medium at a 
later time. This is called write-back caching. The command may complete prior to logical blocks being written 
to the medium. As a result of using a write-back caching there is a period of time when the data may be lost if 
power to the SCSI target device is lost and a volatile cache is being used or a hardware failure occurs. There 
is also the possibility of an error occurring during the subsequent write operation. If an error occurred during 
the write operation, it may be reported as a deferred error on a later command. The application client may 
request that write-back caching be disabled with the Caching mode page (see 6.3.4) to prevent detected write 
errors from being reported as deferred errors. Even with write-back caching disabled, undetected write errors 
may occur. The VERIFY commands and the WRITE AND VERIFY commands may be used to detect those 
errors. 

When the cache becomes full of logical blocks, new logical blocks may replace those currently in the cache. 
The disable page out (dpo) bit in the CDB of commands performing write, read, or verify operations allows the 
application client to influence the replacement of logical blocks in the cache. For write operations, setting the 
dpo bit to one specifies that the device server should not replace existing logical blocks in the cache with the 
new logical blocks being written. For read and verify operations, setting the dpo bit to one specifies that the 
device server should not replace logical blocks in the cache with the logical blocks that are being read. 

NOTE 5 - This does not mean that stale data is allowed in the cache. If a write operation accesses the same 
LBA as a logical block in the cache, the logical block in the cache is updated with the new write data. 

Application clients may use the force unit access (fua) bit in the CDB of commands performing write or read 
operations to specify that the device server shall access the medium. For a write operation, setting the fua bit 
to one causes the device server to complete the data write to the medium before completing the command. 
For a read operation, setting the fua bit to one causes the device server to retrieve the logical blocks from the 
medium rather than from the cache. 

When the dpo and fua bits are both set to one, write and read operations effectively bypass the cache. 

Application clients may use the force unit access non-volatile cache (fua_nv) bit in the CDB of commands 
performing write or read operations to specify that the device server may access a non-volatile cache, if any, 
rather than the medium, if the fua bit is set to zero. For a write operation, an fua_nv bit set to one with the fua 
bit set to zero allows the device server to complete the data write to non-volatile cache rather than the medium 
before completing the command. For a read operation, an fua_nv bit set to one with the fua bit set to zero 
allows the device server to retrieve the logical blocks from the non-volatile cache rather than the medium. 
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When a VERIFY command or a WRITE AND VERIFY command is processed, both a force unit access and a 
synchronize cache operation are implied, since the logical blocks are being verified as being stored on the 
medium. The dpo bit is defined in the VERIFY command since the VERIFY command may cause the 
replacement of logical blocks in the cache. 

Commands may be implemented by the device server that allow the application client to control other 
behavior of the cache: 

a) the PRE-FETCH commands (see 5.4 and 5.5) cause a set of logical blocks requested by the appli¬ 
cation client to be read into cache for possible future access. The logical blocks fetched are subject to 
later replacement; 

b) the SYNCHRONIZE CACHE commands (see 5.20 and 5.21) force any write data in cache in the 
requested set of logical blocks to be written to the medium. These commands may be used to ensure 
that the data is written and any detected errors reported; 

c) the Caching mode page (see 6.3.4) provides control of cache behavior. 

4.12 Implicit head of queue command processing 

Each of the following commands defined by this standard may be processed by the task manager as if it has 
a head of queue task attribute (see SAM-4), even if the command is received with a simple task attribute, an 
ordered task attribute, or no task attribute: 

a) the READ CAPACITY (10) command; and 

b) the READ CAPACITY (16) command. 

See SPC-4 for additional commands subject to implicit head of queue command processing. 

Application clients should not send a command with the ordered task attribute if the command may be 
processed as if it has a head of queue task attribute of, because whether the ordered task attribute is 
processed is vendor-specific. 

4.13 Reservations 

Reservation restrictions are placed on commands as a result of access qualifiers associated with the type of 
reservation. See SPC-4 for a description of reservations. The details of commands that are allowed under 
what types of reservations are described in table 3. 

Commands from I T nexuses holding a reservation should complete normally. Table 3 specifies the behavior 
of commands from registered l_T nexuses when a registrants only or all registrants type persistent reservation 
is present. 

For each command, this standard or SPC-4 defines the conditions that result in the device server completing 
the command with RESERVATION CONFLICT status. 


Working Draft SCSI Block Commands - 3 (SBC-3) 


21 



T10/1799-D Revision 16 


25 August 2008 


Table 3 — SBC-2 commands that are allowed in the presence of various reservations 


Command 

Addressed logical unit has this type of persistent 
reservation held by another l_T nexus 

From any l_T nexus 

From 

registered 

1 T nexus 
(RR all 
types) 

From I T nexus not 
registered 

Write 

Exclusive 

Exclusive 

Access 

Write 
Exclusive 
- RR 

Exclusive 

Access 

-RR 

FORMAT UNIT 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

ORWRITE 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

PRE-FETCH (10)/(16) 

Allowed 

Conflict 

Allowed 

Allowed 

Conflict 

PREVENT ALLOW MEDIUM REMOVAL 
(Prevent=0) 

Allowed 

Allowed 

Allowed 

Allowed 

Allowed 

PREVENT ALLOW MEDIUM REMOVAL 
(Prevent<>0) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

READ (6)/(10)/(12)/(16)/(32) 

Allowed 

Conflict 

Allowed 

Allowed 

Conflict 

READ CAPACITY (10)/(16) 

Allowed 

Allowed 

Allowed 

Allowed 

Allowed 

READ DEFECT DATA (10)/(12) 

Allowed a 

Conflict 

Allowed 

Allowed a 

Conflict 

READ LONG (10)/(16) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

REASSIGN BLOCKS 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

START STOP UNIT with start bit set to 
one and power condition field set to Oh 

Allowed 

Allowed 

Allowed 

Allowed 

Allowed 

START STOP UNIT with start bit set to 
zero or power condition field set to a 
value other than Oh 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

SYNCHRONIZE CACHE (10)/(16) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

VERIFY (10)/(12)/(16)/(32) 

Allowed 

Conflict 

Allowed 

Allowed 

Conflict 

WRITE (6)/(10)/(12)/(16)/(32) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

WRITE AND VERIFY (10)/(12)/(16)/(32) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

WRITE LONG (10)/(16) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

WRITE SAME (10)/(16)/(32) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

XDREAD (10)/(32) 

Allowed 

Conflict 

Allowed 

Allowed 

Conflict 

XDWRITE (10)/(32) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

XDWRITEREAD (10)/(32) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

XPWRITE (10)/(32) 

Conflict 

Conflict 

Allowed 

Conflict 

Conflict 

Key: RR = Registrants Only or All Registrants 

Allowed: Commands received from l_T nexuses not holding the reservation or from l_T nexuses not regis¬ 
tered when a registrants only or all registrants type persistent reservation is present should complete nor¬ 
mally. 

Conflict: Commands received from l_T nexuses not holding the reservation or from l_T nexuses not regis¬ 
tered when a registrants only or all registrants type persistent reservation is present shall not be performed, 
and the device server shall complete the command with RESERVATION CONFLICT status. 

d The device server in logical units claiming compliance with previous versions of this standard (e.g., 
SBC-2) may complete the command with RESERVATION CONFLICT status. Device servers may 
report whether certain commands are allowed in the PERSISTENT RESERVE IN command REPORT 
CAPABILITIES service action parameter data ALLOW COMMANDS field (see SPC-4). 
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4.14 Error reporting 

4.14.1 Error reporting overview 

If any of the conditions listed in table 4 occur during the processing of a command, then the device server 
shall terminate the command with CHECK CONDITION status with the sense key set to the specified value 
and the additional sense code set to the appropriate value for the condition. Some errors may occur after the 
completion status has already been reported. For such errors, SPC-4 defines a deferred error reporting 
mechanism. Table 4 lists some error conditions and the applicable sense keys. The list does not provide a 
complete list of all conditions that may cause CHECK CONDITION status. 


Table 4 — Example error conditions 


Condition 

Sense key 

Invalid LBA 

ILLEGAL REQUEST 

Unsupported option requested 

ILLEGAL REQUEST 

Logical unit reset, I T nexus loss, or medium change 
since last command from this application client 

UNIT ATTENTION 

Self diagnostic failed 

HARDWARE ERROR 

Unrecovered error 

MEDIUM ERROR or HARDWARE ERROR 

Recovered read error 

RECOVERED ERROR 

Pseudo recovered error 

MEDIUM ERROR 

Over-run or other error that might be resolved by 
repeating the command 

ABORTED COMMAND 

Attempt to write on write-protected medium 

DATA PROTECT 


Direct-access block devices compliant with this standard shall support both the fixed and descriptor formats of 
sense data (see SPC-4). If fixed format sense data is used but the values to be placed in the sense data 
information field or command-specific information field are too large for the fixed format sense data (e.g., 
an 8-byte LB A), the valid bit shall be set to zero. 

Table 5 summarizes use of the sense data fields. 


Table 5 — Sense data field usage for direct-access block devices 


Field 

Usage 

Reference 

valid bit and 

INFORMATION field 

READ LONG commands 

5.16 and 5.17 

REASSIGN BLOCKS command 

5.18 

WRITE LONG commands 

5.35 and 5.36 

Any command that accesses the medium, based on the 
Read-Write Error Recovery mode page 

6.3.5 

COMMAND-SPECIFIC 

INFORMATION field 

EXTENDED COPY command 

SPC-4 

REASSIGN BLOCKS command 

5.18 

ili bit 

READ LONG commands 

5.16 and 5.17 

WRITE LONG commands 

5.35 and 5.36 


When a command attempts to access or reference an invalid LBA, the device server shall return the first 
invalid LBA in the information field of the sense data (see SPC-4). 
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When a recovered read error is reported, the information field of the sense data shall contain the LBA of the 
last logical block accessed by the command on which a recovered read error occurred. 

When an unrecovered error is reported, the information field of the sense data shall contain the LBA of the 
logical block on which the unrecovered error occurred. 

4.14.2 Processing pseudo unrecovered errors 

If a pseudo unrecovered error is encountered on a logical block with correction disabled (e.g., by a command, 
a background scan, or a background self-test), then the device server shall: 

a) perform no error recovery on the affected logical blocks, including any read error recovery enabled by 
the Read-Write Error Recovery mode page (see 6.3.5) or the Verify Error Recovery mode page (see 
6.3.6); 

b) perform no automatic reallocation of the affected logical blocks, including any automatic reallocation 
enabled by the Read-Write Error Recovery mode page; 

c) not consider errors on the affected logical blocks to be informational exception conditions as defined 
in the Information Exceptions Control mode page (see SPC-4); 

d) not log errors on the affected logical blocks in the Error Counter log pages (see SPC-4); and 

e) in any information returned for the error (e.g., in sense data or in the Background Scan Results log 
page (see 6.2.2)), set the sense key set to MEDIUM ERROR and either: 

A) should set the additional sense code to READ ERROR - LBA MARKED BAD BY APPLICATION 
CLIENT; or 

B) may set the additional sense code to UNRECOVERABLE READ ERROR. 

If a pseudo unrecovered error is encountered on a logical block with correction enabled (e.g., by a command, 
a background scan, or a background self-test), the device server shall: 

a) if enabled by the Read-Write Error Recovery mode page (see 6.3.5) or the Verify Error Recovery 
mode page (see 6.3.6), perform error recovery on the affected logical blocks; 

b) perform no automatic reallocation of the affected logical blocks, including any automatic reallocation 
enabled by the Read-Write Error Recovery mode page; 

c) consider errors on the affected logical blocks to be informational exception conditions as defined in 
the Information Exceptions Control mode page (see SPC-4); 

d) log errors on the affected logical blocks in the Error Counter log pages (see SPC-4); 

e) in any information returned for the error (e.g., in sense data or in the Background Scan Results log 
page (see 6.2.2)), set the sense key set to MEDIUM ERROR and either: 

A) should set the additional sense code to READ ERROR - LBA MARKED BAD BY APPLICATION 
CLIENT; or 

B) may set the additional sense code to UNRECOVERABLE READ ERROR. 

4.14.3 Block commands sense data descriptor 

Table 6 defines the block commands sense data descriptor used in descriptor format sense data for 
direct-access block devices. 


Table 6 — Block commands sense data descriptor format 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

DESCRIPTOR TYPE (05h) 

1 

ADDITIONAL LENGTH (02h) 

2 

Reserved 

3 

Reserved ili Reserved 


The descriptor type field and additional length field are defined in SPC-4 and shall be set to the value 
defined in table 6. 
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The incorrect length indication (in) bit indicates that the requested data length in a READ LONG 
command or WRITE LONG command did not match the length of the logical block. 

4.15 Model for XOR commands 

4.15.1 Model for XOR commands overview 

In storage arrays, a storage array controller (see 3.1.53) organizes a group of direct-access block devices into 
objects. The type of object supported by this model is the redundancy group (see 3.1.48), where some of the 
logical blocks on the direct-access block devices are used for XOR-protected data (see 3.1.61) and some of 
the logical blocks are used for check data (see 3.1.5). The check data is generated by performing a 
cumulative XOR (see 3.1.19) operation of the XOR-protected data. The XOR operation may be performed by 
the storage array controller or by the direct-access block devices. 

A direct-access block device containing XOR-protected data is called a data disk. A direct-access block 
device containing check data is called a parity disk. 

Performing the XOR operation in the direct-access block devices may result in a reduced number of data 
transfers across a service delivery subsystem. For example, when the XOR operation is done within the 
storage array controller, four commands are needed for a typical update write sequence: 

a) a command performing a read operation from the data disk; 

b) a command performing a write operation to the data disk; 

c) a command performing a read operation from the parity disk; and 

d) a command performing a write operation to the parity disk. 

The storage array controller also does two internal XOR operations in this sequence. 

In contrast, during storage array controller supervised XOR operations (see 4.15.2) only three commands are 
needed: 

a) a command performing a write operation to the data disk; 

b) a command performing a read operation from the data disk; and 

c) a command performing a write operation to the parity disk. 

4.15.2 Storage array controller supervised XOR operations 

4.15.2.1 Storage array controller supervised XOR operations overview 

A storage array controller supervises three basic operations that require XOR functionality: 

a) update write operation (see 4.15.2.2); 

b) regenerate operation (see 4.15.2.3); and 

c) rebuild operation (see 4.15.2.4). 

Command sequences for each of these operations use the device servers in the direct-access block devices 
to perform the necessary XOR functions. 

Three XOR commands are needed to implement storage array controller supervised XOR operations: 
XDREAD commands (see 5.40 and 5.41), XDWRITE commands (see 5.42 and 5.43), and XPWRITE 
commands (see 5.46 and 5.47). An XDWRITEREAD command (see 5.44 and 5.45) may be used in place of a 
sequence of an XDWRITE command followed by an XDREAD command. The storage array controller also 
uses READ commands and WRITE commands for certain operations. 

4.15.2.2 Update write operation 

The update write operation writes new XOR-protected data to a data disk and updates the check data on the 
parity disk. The sequence is: 

1) An XDWRITE command is sent to the data disk. This transfers new XOR-protected data to the data 
disk. The device server reads the old XOR-protected data, performs an XOR operation using the old 
XOR-protected data and the received XOR-protected data, retains the intermediate XOR result, and 
writes the received XOR-protected data to the medium; 
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2) An XDREAD command is sent to the data disk. This command transfers the intermediate XOR data to 
the storage array controller; and 

3) An XPWRITE command is sent to the parity disk. This transfers the intermediate XOR data (i.e., XOR 
data received in a previous XDREAD command) to the parity disk. The device server reads the old 
check data, performs an XOR operation using the old check data and the intermediate XOR data, and 
writes the result (i.e., the new check data) to the medium. 

In place of steps 1) and 2), a single XDWRITEREAD command may be sent. 

4.15.2.3 Regenerate operation 

The regenerate operation is used to recreate one or more logical blocks that have an error. This is 
accomplished by reading the associated logical block from each of the other direct-access block devices 
within the redundancy group and performing an XOR operation with each of these logical blocks. The last 
XOR result is the data that should have been present on the unreadable direct-access block device. The 
number of steps is dependent on the number of direct-access block devices in the redundancy group, but the 
sequence is as follows: 

1) A READ command is sent to the first direct-access block device. This transfers the data from the 
direct-access block device to the storage array controller; 

2) An XDWRITE command with the disable write bit set to one is sent to the next direct-access block 
device, transferring the data from the previous read operation to the next direct-access block device. 
The direct-access block device reads its data, performs an XOR operation on the received data and 
its data, and retains the intermediate XOR result; 

3) An XDREAD command is sent to the same direct-access block device as in step 2). This transfers the 
intermediate XOR data from the device to the storage array controller; and 

4) Steps 2) and 3) are repeated until all direct-access block devices in the redundancy group except the 
failed device have been accessed. 

The intermediate XOR data returned by the last XDREAD command is the regenerated data for the failed 
device. 

In place of steps 2) and 3), a single XDWRITEREAD command with the disable write bit set to one may be 
used. 

4.15.2.4 Rebuild operation 

The rebuild operation is similar to the regenerate operation, except that the last XOR result is written to the 
replacement device. This function is used when a failed device is replaced and the storage array controller is 
writing the rebuilt data to the replacement device. The number of steps is dependent on the number of 
direct-access block devices in the redundancy group, but the sequence is as follows: 

1) A READ command is sent to the first direct-access block device. This transfers the data from the 
direct-access block device to the storage array controller; 

2) An XDWRITE command with the disable write bit set to one is sent to the next direct-access block 
device, transferring the data from the previous read operation to the next direct-access block device. 
The device server reads its data, performs an XOR operation using the received data and its data, 
and retains the intermediate XOR result; 

3) An XDREAD command is sent to the same direct-access block device as in step 2). This transfers the 
intermediate XOR data from the device to the storage array controller; 

4) Steps 2) and 3) are repeated until all direct-access block devices in the redundancy group except the 
replacement device have been accessed. The intermediate XOR data returned by the last XDREAD 
command is the regenerated data for the replacement device; and 

5) A WRITE command is sent to the replacement device. This transfers the regenerated data from step 
4 to the replacement device. The replacement device writes the regenerated data to the medium. 

In place of steps 2) and 3), a single XDWRITEREAD command with the disable write bit set to one may be 
used. 
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4.15.3 Array subsystem considerations 

4.15.3.1 Array subsystem considerations overview 

This subclause lists considerations that apply to any array subsystem, but describes how use of the XOR 
commands may affect handling of those situations. 

4.15.3.2 Buffer full status handling 

When the storage array controller sends an XDWRITE command to a device, the device retains the resulting 
XOR data until the storage array controller issues a matching XDREAD command to retrieve the data (see 
4.15.4). Depending on the size of the device’s buffer and the size of the XOR data, this may consume all of 
the device’s internal buffer space. When all of the device’s internal buffer space is allocated for XOR data, it 
may not be able to accept new medium access commands other than valid XDREAD commands and it may 
not be able to begin processing of commands that are already in the task set. 

When the device server is not able to accept a new command because there is not enough space in the 
buffer, the device server shall terminate that command with CHECK CONDITION status with the sense key 
set to ILLEGAL REQUEST and the additional sense code set to BUFFER FULL. 

When a storage array controller receives this status, it may issue any matching XDREAD commands needed 
to satisfy any previous XDWRITE commands. This results in buffer space being freed for use by other 
commands. If it has no XDREAD commands to send, the storage array controller may assume the buffer 
space has been allocated to another SCSI initiator device (see SAM-4). The storage array controller may retry 
the command in the same manner that it would retry a command that a device server completes with TASK 
SET FULL status, including not retrying the command too frequently. 

The bidirectional XDWRITEREAD command avoids the buffer full condition, since the device server controls 
when it accepts more write data and provides read data. 

4.15.3.3 Access to an inconsistent stripe 

A stripe is a set of corresponding extents (see 3.1.20) from two or more direct-access block devices. 

When the storage array controller issues an update write to a data disk, the data in the data disk has been 
updated when successful status is returned for the command. Until the parity disk has been updated, 
however, the associated stripe in the redundancy group is not consistent (i.e., performing an XOR operation 
on the XOR-protected data does not produce the check data). 

The storage array controller shall keep track of this window of inconsistency and ensure that a regenerate or 
rebuild operation for any data extent within the stripe is not attempted until after the parity disk has been 
updated, making the stripe consistent again. For multi-initiator systems, tracking the updates may be more 
complex because each storage array controller needs to ensure that a second storage array controller is not 
writing to a stripe that the first storage array controller is regenerating or rebuilding. The coordination between 
storage array controllers is system specific and is beyond the scope of this standard. 

If a device server terminates any of the XOR commands with CHECK CONDITION status and an unrecovered 
error is indicated, an inconsistent stripe may result. It is the storage array controller’s responsibility to identify 
the failing device, the identify the scope of the failure, then limit access to the inconsistent stripe. The recovery 
procedures that the storage array controller implements are outside the scope of this standard. 

4.15.4 XOR data retention requirements 

The device server shall retain XOR data resulting from an XDWRITE command awaiting retrieval by a 
matching XDREAD command until one of the following events occurs: 

a) a matching XDREAD command; 

b) logical unit reset; 

c) l_T nexus loss associated with the l_T nexus that sent the XDWRITE command; 

d) processing any of the following task management functions (see SAM-4): 

A) CLEAR TASK SET; 
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B) ABORT TASK specifying the l_T_L_Q nexus (see SAM-4) of an XDREAD command retrieving 
that XOR data; or 

C) ABORT TASK SET 

If the XOR data is lost and the application client still wants to perform the XOR operation, it is required to 
resent the XDWRITE command after one of those events. 

4.16 START STOP UNIT and power conditions 

4.16.1 START STOP UNIT and power conditions overview 

The START STOP UNIT command (see 5.19) allows an application client to control the power condition of a 
logical unit. This method includes specifying that the logical unit transition to a power condition. 

In addition to the START STOP UNIT command, the power condition of a logical unit may be controlled by the 
Power Condition mode page (see SPC-4). If both the START STOP UNIT command and the Power Condition 
mode page methods are being used to control the power condition of the same logical unit, then the power 
condition specified by any START STOP UNIT command shall override the Power Condition mode page's 
power control. 

There shall be no notification to the application client that a logical unit has transitioned from one power 
condition to another. The REQUEST SENSE command (see SPC-4) indicates if a logical unit is in the idle 
power condition or the standby power condition and may indicate if a logical unit is in the stopped power 
condition. 

If the logical unit is in the idle power condition, then the device server shall process a REQUEST SENSE 
command by: 

1) returning parameter data containing sense data with the sense key set to NO SENSE and the 
additional sense code set to: 

A) LOW POWER CONDITION ON if the reason for entry into the idle power condition is unknown; 

B) IDLE CONDITION ACTIVATED BY TIMER if the logical unit entered the idle power condition due 
to the idle condition timer (see SPC-4); and 

C) IDLE CONDITION ACTIVATED BY COMMAND if the logical unit entered the idle power condition 
due to a START STOP UNIT command or receipt of a command requiring the idle power 
condition while it was in the standby power condition; 

and 

2) completing the REQUEST SENSE command with GOOD status. 

If the logical unit is in the standby power condition, then the device server shall process a REQUEST SENSE 
command by: 

1) returning parameter data containing sense data with the sense key set to NO SENSE and the 
additional sense code set to: 

A) LOW POWER CONDITION ON if the reason for entry into the standby power condition is 
unknown; 

B) STANDBY CONDITION ACTIVATED BY TIMER if the logical unit entered the standby power 
condition due to the standby condition timer (see SPC-4); and 

C) STANDBY CONDITION ACTIVATED BY COMMAND if the logical unit entered the standby 
power condition due to a START STOP UNIT command; 

and 

2) completing the REQUEST SENSE command with GOOD status. 

If the logical unit is in the stopped power condition, then the device server shall process a REQUEST SENSE 
command by: 

1) returning parameter data containing sense data with: 

A) the sense key set to NO SENSE and the additional sense code set to NO ADDITIONAL SENSE 
INFORMATION; or 

B) the sense key set to NOT READY and the additional sense code set to LOGICAL UNIT NOT 
READY, INITIALIZING COMMAND REQUIRED; 

and 


28 


Working Draft SCSI Block Commands - 3 (SBC-3) 



25 August 2008 


T10/1799-D Revision 16 


2) completing the REQUEST SENSE command with GOOD status. 

No power condition shall affect the supply of any power required for proper operation of a service delivery 
subsystem. 

4.16.2 START STOP UNIT and power conditions state machine 
4.16.2.1 START STOP UNIT and power conditions state machine overview 

The SSU_PC (start stop unit power condition) state machine for logical units implementing the START STOP 
UNIT command describes the logical unit power states and transitions resulting from settings by the START 
STOP UNIT command and settings in the Power Condition mode page (see SPC-4). 

The SSU_PC states are as follows: 

a) SSU_PCO:Powered_on (see 4.16.2.2) (initial state); 

b) SSU_PC1 Active (see 4.16.2.3); 

c) SSU_PC2:ldle (see 4.16.2.4); 

d) SSU_PC3:Standby (see 4.16.2.5); and 

e) SSU_PC4:Stopped (see 4.16.2.6). 

The SSU_PC state machine shall start in the SSU_PCO:Powered_on state after power on. 

NOTE 6 - The SSU_PC state machine is an enhanced version of the Power Condition state machine 
described in SPC-4. 

Figure 4 describes the SSU_PC state machine. 
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Idle 3 


-Standby * 3 
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Notes: 

3 This state or transition is also described in SPC-4, but may have additional characteristics 
unique to this standard (e.g., a transition to or from a state described in this standard). 
b This state or transition is described in this standard. 


Figure 4 — Power condition state machine for logical units implementing the START STOP UNIT 
command 

4.16.2.2 SSU_PCO:Powered_on state 

4.16.2.2.1 SSU_PCO:Powered_on state description 

The logical unit shall enter this state upon power on. This state consumes zero time. 

4.16.2.2.2 Transition SSU_PCO:Powered_on to SSU_PC1 :Active 

This transition shall occur if: 

a) the logical unit has been configured to transition to the SSU_PC1 :Active state. 

4.16.2.2.3 Transition SSU_PCO:Powered_on to SSU_PC4:Stopped 

This transition shall occur if: 

a) the logical unit has been configured to transition to the SSU_PC4:Stopped state. 
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4.16.2.3 SSU_PC1 :Active state 

4.16.2.3.1 SSUPC1 Active state description 

While in this state, if power on initialization is not complete, then the logical unit completes its power on 
initialization. 

While in this state, after power on initialization is complete, then: 

a) the logical unit is in the active power condition (see SPC-4); 

b) if the idle condition timer is active (see SPC-4) and not disabled (see 5.19), then the idle condition 
timer is running; and 

c) if the standby condition timer is active (see SPC-4) and not disabled (see 5.19), then the standby 
condition timer is running. 

4.16.2.3.2 Transition SSU_PC1 :Active to SSU_PC2:ldle 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the power condition field set to 
IDLE; 

b) the device server processes a START STOP UNIT command with the power condition field set to 
FORCE_IDLE_0; or 

c) the idle condition timer is active (see SPC-4), enabled (see 5.19), and zero. 

4.16.2.3.3 Transition SSU_PC1:Active to SSU_PC3:Standby 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the power condition field set to 
STANDBY; 

b) the device server processes a START STOP UNIT command with the power condition field set to 
FORCE_STANDBY_0; or 

c) the standby condition timer is active (see SPC-4), enabled (see 5.19), and zero. 

4.16.2.3.4 Transition SSU_PC1:Active to SSU_PC4:Stopped 

This transition shall occur after the device server processes a START STOP UNIT command with the start 
bit set to zero and the power condition field set to START VALID. 

4.16.2.4 SSU_PC2:ldle state 

4.16.2.4.1 SSU_PC2:ldle state description 

While in this state: 

a) the logical unit is in the idle power condition (see SPC-4); 

b) the device server processes the REQUEST SENSE command as described in 4.16.1; and 

c) if the standby condition timer is active (see SPC-4) and not disabled (see 5.19), then the standby 
condition timer is running. 

4.16.2.4.2 Transition SSU_PC2:ldle to SSU_PC1 Active 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the start bit set to one; 

b) the device server processes a START STOP UNIT command with the power condition field set to 
ACTIVE; or 

c) the device server processes a command that requires the logical unit to be in the SSU_PC1 Active 
state to process the command. 
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4.16.2.4.3 Transition SSU_PC2:ldle to SSU_PC3:Standby 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the power condition field set to 
STANDBY; 

b) the device server processes a START STOP UNIT command with the power condition field set to 
FORCE STANDBY_0; or 

c) the standby condition timer is active (see SPC-4), enabled (see 5.19), and zero. 

4.16.2.4.4 Transition SSU_PC2:ldle to SSU_PC4:Stopped 

This transition shall occur after the device server processes a START STOP UNIT command with the start 

bit set to zero. 

4.16.2.5 SSU_PC3:Standby state 

4.16.2.5.1 SSU_PC3:Standby state description 

While in this state: 

a) the logical unit is in the standby power condition (see SPC-4); and 

b) the device server processes the REQUEST SENSE command as described in 4.16.1. 

4.16.2.5.2 Transition SSU_PC3:Standby to SSU_PC1 :Active 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the start bit set to one; 

b) the device server processes a START STOP UNIT command with the power condition field set to 
ACTIVE; or 

c) the device server processes a command that requires the logical unit to be in the SSU_PC1 Active 
state to process the command. 

4.16.2.5.3 Transition SSU_PC3:Standby to SSU_PC2:ldle 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the power condition field set to 
IDLE; 

b) the device server processes a START STOP UNIT command with the power condition field set to 
FORCE_IDLE_0; or 

c) the device server processes a command that requires the logical unit to be in the SSU_PC2:ldle state 
to process the command. 

4.16.2.5.4 Transition SSU_PC3:Standby to SSU_PC4:Stopped 

This transition shall occur after the device server processes a START STOP UNIT command with the start 

bit set to zero. 

4.16.2.6 SSU_PC4:Stopped state 

4.16.2.6.1 SSU_PC4:Stopped state description 

While in this state: 

a) the logical unit is in the stopped power condition; 

b) the device server is not capable of processing medium access commands. While in this state, the 
device server shall terminate each medium access command or TEST UNIT READY command with 
CHECK CONDITION status with the sense key set to NOT READY and the additional sense code set 
to LOGICAL UNIT NOT READY, INITIALIZING COMMAND REQUIRED; 

c) the device server processes the REQUEST SENSE command as described in 4.16.1; and 
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d) the power consumed by the SCSI target device should be less than or equal to that consumed than 
when the logical unit is in the SSU_PC1 Active, SSU_PC2:ldle, or SSU_PC3:Standby states. 

4.16.2.6.2 Transition SSU_PC4:Stopped to SSU PC1 Active 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the start bit set to one; or 

b) the device server processes a START STOP UNIT command with the power condition field set to 
ACTIVE. 

4.16.2.6.3 Transition SSU_PC4:Stopped to SSU_PC2:ldle 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the power condition field set to 
IDLE; or 

b) the device server processes a START STOP UNIT command with the power condition field set to 
FORCEIDLEO. 

4.16.2.6.4 Transition SSU_PC4:Stopped to SSU_PC3:Standby 

This transition shall occur after: 

a) the device server processes a START STOP UNIT command with the power condition field set to 
STANDBY; or 

b) the device server processes a START STOP UNIT command with the power condition field set to 
FORC ESTAN D B Y_0. 

4.17 Protection information model 

4.17.1 Protection information overview 

The protection information model provides for protection of user data while it is being transferred between a 
sender and a receiver. Protection information is generated at the application layer and may be checked by 
any object associated with the l_T_L nexus (see SAM-4). Once received, protection information is retained 
(e.g., written to medium, stored in non-volatile memory, or recalculated on read back) by the device server 
until overwritten. Power loss, hard reset, logical unit reset, and l_T nexus loss shall have no effect on the 
retention of protection information. 

Support for protection information shall be indicated in the protect bit in the standard INQUIRY data (see 
SPC-4). 

If the logical unit is formatted with protection information and the emdp bit is set to one in the 
Disconnect-Reconnect mode page (see SPC-4), then checking of the logical block reference tag within a 
service delivery subsystem without accounting for modified data pointers and data alignments may cause 
false errors when logical blocks are transmitted out of order. 

Protection information is also referred to as the data integrity field (DIF). 

4.17.2 Protection types 

4.17.2.1 Protection types overview 

The content of protection information is dependent on the type of protection to which a logical unit has been 
formatted. 

The type of protection supported by the logical unit shall be indicated in the spt field in the Extended INQUIRY 
Data VPD page (see SPC-4). The current protection type shall be indicated in the p_type field in the READ 
CAPACITY(16) command (see 5.13). 

An application client may format the logical unit to a specific type of protection using the fmtpinfo field and the 
protection field usage field in the FORMAT UNIT command (see 5.2). 
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The medium access commands are processed in a different manner by a device server depending on the 
type of protection in effect. When used in relation to types of protection, the term “medium access commands” 
is defined as the following commands: 


a) ORWRITE; 

b) READ (10); 

c) READ (12); 

d) READ (16); 

e) READ (32); 

f) VERIFY (10); 

g) VERIFY (12); 

h) VERIFY (16); 

i) VERIFY (32); 

j) WRITE (10); 

k) WRITE (12); 

l) WRITE (16); 

m) WRITE (32); 

n) WRITE AND VERIFY (10) 

o) WRITE AND VERIFY (12) 

p) WRITE AND VERIFY (16) 

q) WRITE AND VERIFY (32) 

r) WRITE SAME (10); 

s) WRITE SAME (16); 

t) WRITE SAME (32); 

u) XDWRITE (10); 

v) XDWRITE (32); 

w) XDWRITEREAD (10); 

x) XDWRITEREAD (32); 

y) XPWRITE (10); 

z) XPWRITE (32); 

aa) XDREAD (10); and 

ab) XDREAD (32). 


The device server may allow the READ (6) command (see 5.7) and the WRITE (6) command (see 5.26) 
regardless of the type of protection to which the logical unit has been formatted. 


4.17.2.2 Type 0 protection 

Type 0 protection defines no protection over that which is defined within the transport protocol. 

A logical unit that has been formatted with protection information disabled (see 5.2) or a logical unit that does 
not support protection information (i.e., the protect bit set to zero in the Standard INQUIRY data (see 
SPC-4)) has type 0 protection. 

If type 0 protection is enabled and the rdprotect field, wrprotect field, vrprotect field, or orprotect field 
is set to a non-zero value, then media commands are invalid and may be terminated by the device server with 
CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set 
to INVALID FIELD IN CDB. 

If type 0 protection is enabled and the rdprotect field, wrprotect field, vrprotect field, or orprotect field 
is set to a zero value, then the following media commands are invalid and shall be terminated by the device 
server with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional 
sense code set to INVALID COMMAND OPERATION CODE: 

a) READ (32); 

b) VERIFY (32); 

c) WRITE (32); 

d) WRITE AND VERIFY (32); and 

e) WRITE SAME (32). 
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4.17.2.3 Type 1 protection 

Type 1 protection: 

a) defines the content of the logical block guard field; 

b) does not define the content of the logical block application tag field; and 

c) defines the content the logical block reference tag field. 

If type 1 protection is enabled, then the following media commands are invalid and shall be terminated by the 
device server with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the 
additional sense code set to INVALID COMMAND OPERATION CODE: 

a) READ (32); 

b) VERIFY (32); 

c) WRITE (32); 

d) WRITE AND VERIFY (32); and 

e) WRITE SAME (32). 

For valid medium access commands in which the rdprotect field, wrprotect field, vrprotect field, or 
orprotect field is set to: 

a) zero, the data-in buffer and/or data-out buffer associated with those commands shall consist of logical 
blocks with only user data; or 

b) a non-zero value, the data-in buffer and/or data-out buffer shall consist of logical blocks with both user 
data and protection information. 

4.17.2.4 Type 2 protection 

Type 2 protection: 

a) defines the content of the logical block guard field; 

b) does not define the content of the logical block application tag field; and 

c) defines, except for the first logical block addressed by the command, the content of the logical block 
reference tag field. 

If type 2 protection is enabled and the rdprotect field, wrprotect field, vrprotect field, or orprotect field 
is set to a non-zero value, then the following media commands are invalid and shall be terminated by the 
device server with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the 
additional sense code set to INVALID COMMAND OPERATION CODE: 

a) ORWRITE; 

b) READ (10); 

c) READ (12); 

d) READ (16); 

e) VERIFY (10); 

f) VERIFY (12); 

g) VERIFY (16); 

h) WRITE (10); 

i) WRITE (12); 

j) WRITE (16); 

k) WRITE AND VERIFY (10); 

l) WRITE AND VERIFY (12); 

m) WRITE AND VERIFY (16); 

n) WRITE SAME (10); 

o) WRITE SAME (16); 

p) XDWRITE (10); 

q) XDWRITE (32); 

r) XDWRITEREAD (10); 

s) XDWRITEREAD (32); 

t) XPWRITE (10); 

u) XPWRITE (32); 

v) XDREAD (10); and 
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w) XDREAD (32). 

For valid medium access commands in which the rdprotect field, wrprotect field, vrprotect field, or 
orprotect field is set to: 

a) zero, the data-in buffer and/or data-out buffer associated with those commands shall consist of logical 
blocks with only user data; or 

b) a non-zero value, the data-in buffer and/or data-out buffer shall consist of logical blocks with both user 
data and protection information. 

4.17.2.5 Type 3 protection 

Type 3 protection: 

a) defines the content of the logical block guard field within the logical blocks of the data-in buffer 
and/or data-out buffer; 

b) does not define the content of the logical block application tag field; and 

c) does not define the content of the logical block reference tag field. 

If type 3 protection is enabled, then the following media commands are invalid and shall be terminated by the 
device server with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the 
additional sense code set to INVALID COMMAND OPERATION CODE: 

a) READ (32); 

b) VERIFY (32); 

c) WRITE (32); 

d) WRITE AND VERIFY (32); and 

e) WRITE SAME (32). 

For valid medium access commands in which the rdprotect field, wrprotect field, vrprotect field, or 
orprotect field is set to: 

a) zero, the data-in buffer and/or data-out buffer associated with those commands shall consist of logical 
blocks with only user data; or 

b) a non-zero value, the data-in buffer and/or data-out buffer shall consist of logical blocks with both user 
data and protection information. 

4.17.3 Protection information format 

Table 7 defines the placement of protection information in a logical block. 


Table 7 — User data and protection information format 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 


USER DATA 


n -1 



n 

(MSB) 

LOGICAL BLOCK GUARD 


n + 1 


(LSB) 

n + 2 

(MSB) 

LOGICAL BLOCK APPLICATION TAG 


n + 3 


(LSB) 

n + 4 

(MSB) 

LOGICAL BLOCK REFERENCE TAG 


n + 7 


(LSB) 
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The user data field shall contain user data. The contents of the user data field shall be used to generate and 
check the CRC contained in the logical block guard field. 

The logical block guard field contains the CRC (see 4.17.4) of the contents of the user data field. 

The logical block application tag field is set by the application client. If the device server detects a: 

a) LOGICAL BLOCK application tag field set to FFFFh and type 1 protection (see 4.17.2.3) or type 2 
protection (see 4.17.2.4) is enabled; or 

b) LOGICAL BLOCK APPLICATION TAG field Set to FFFFh, LOGICAL BLOCK REFERENCE TAG field Set to 
FFFF_FFFFh, and type 3 protection (see 4.17.2.5) is enabled, 

then the device server disables checking of all protection information for the logical block when reading from 
the medium. Otherwise, the contents of the logical block application tag are not defined by this standard. 

The logical block application tag field may be modified by a device server if the ato bit is set to zero in the 
Control mode page (see SPC-4). If the ATO bit is set to one in the Control mode page, then the device server 
shall not modify the logical block application tag field. 

The contents of the logical block application tag field shall not be used to generate or check the CRC 
contained in the logical block guard field. 

The logical block reference tag field of the first logical block in the data-in buffer and/or data-out buffer 
shall contain the value specified in table 8. 


Table 8 — Contents of the logical block reference tag field of the first logical block in the data-in 
buffer and/or data-out buffer 


Protection Type 

Content of the logical block reference tag field of the first logical block in the 
data-in buffer and/or data-out buffer 

Type 1 
protection 
(see 4.17.2.3) 

The least significant four bytes of the LBA contained in the logical block address field 
of the command. 

Type 2 
protection 
(see 4.17.2.4) 

The value in the expected initial logical block reference tag field of the command. 

Type 3 
protection 
(see 4.17.2.5) 

Not defined in this standard. However, this field may be modified by the device server if 
the ato bit is set to zero in the Control mode page (see SPC-4). If the ato bit is set to 
one in the Control mode page, then the device server shall not modify this field. 


The logical block reference tag field subsequent logical blocks in the data-in buffer and/or data-out buffer 
shall be set as specified in table 9. 


Table 9 — Setting the logical block reference tag field of the subsequent logical blocks in the 
data-in buffer and/or data-out buffer 


Protection Type 

The content of the logical block reference tag field of each subsequent logical 
block in the data-in buffer and/or data-out buffer 

Type 1 
protection 
(see4.17.2.3)and 
Type 2 
protection 
(see 4.17.2.4) 

The logical block reference tag of the previous logical block plus one. 

Type 3 
protection 
(see 4.17.2.5) 

Not defined in this standard. However, this field may be modified by the device server if 
the ato bit is set to zero in the Control mode page (see SPC-4). If the ato bit is set to 
one in the Control mode page, then the device server shall not modify this field. 


Working Draft SCSI Block Commands - 3 (SBC-3) 


37 






T10/1799-D Revision 16 


25 August 2008 


The contents of the logical block reference tag field shall not be used to generate or check the CRC 
contained in the logical block guard field. 

4.17.4 Logical block guard 

4.17.4.1 Logical block guard overview 

The logical block guard field shall contain a CRC that is generated from the contents of the user data field. 

Table 10 defines the CRC polynomials used to generate the logical block guard from the contents of the user 
data field. 


Table 10 — CRC polynomials 


Function 

Definition 

F(x) 

A polynomial representing the transmitted user data field, which is covered by the CRC. For 
the purposes of the CRC, the coefficient of the highest order term shall be byte zero bit seven 
of the user data field and the coefficient of the lowest order term shall be bit zero of the last 
byte of the user data field. 

F’(x) 

A polynomial representing the received user data field. 

G(x) 

The generator polynomial: 

G(x) = x 16 + x 15 + x 11 + x 9 + x 8 + x 7 + x 5 + x 4 + x 2 + x + 1 
(i.e., G(x) = 18BB7h) 

R( x ) 

The remainder polynomial calculated during CRC generation by the transmitter, representing 
the transmitted logical block guard field. 

R’(x) 

A polynomial representing the received logical block guard field. 

RB(x) 

The remainder polynomial calculated during CRC checking by the receiver. 

RB(x) = 0 indicates no error was detected. 

RC(x) 

The remainder polynomial calculated during CRC checking by the receiver. 

RC(x) = 0 indicates no error was detected. 

QA(x) 

The quotient polynomial calculated during CRC generation by the transmitter. The value of 
QA(x) is not used. 

QB(x) 

The quotient polynomial calculated during CRC checking by the receiver. The value of QB(x) 
is not used. 

QC(x) 

The quotient polynomial calculated during CRC checking by the receiver. The value of QC(x) 
is not used. 

M(x) 

A polynomial representing the transmitted user data field followed by the transmitted logical 
BLOCK GUARD field. 

M’( x ) 

A polynomial representing the received user data field followed by the received logical 

BLOCK GUARD field. 


4.17.4.2 CRC generation 

The equations that are used to generate the CRC from F(x) are as follows. All arithmetic is modulo 2. 

The transmitter shall calculate the CRC by appending 16 zeros to F(x) and dividing by G(x) to obtain the 
remainder R(x): 

(x 16 xF(x)) Rgj 

G(x) G(x) 

R(x) is the CRC value, and is transmitted in the logical block guard field. 
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M(x) is the polynomial representing the user data field followed by the logical block guard field (i.e., F(x) 
followed by R(x)): 

M(x) = (x 16 x F(x)) + R(x) 

4.17.4.3 CRC checking 

M’(x) (i.e., the polynomial representing the received user data field followed by the received logical block 
guard field) may differ from M(x) (i.e., the polynomial representing the transmitted user data field followed by 
the transmitted logical block guard field) if there are transmission errors. 

The receiver may check M’(x) validity by appending 16 zeros to F’(x) and dividing by G(x) and comparing the 
calculated remainder RB(x) to the received CRC value R’(x): 

(x 16 x R(x)) = Q B(X) + RBIX] 

G(x) G(x) 

In the absence of errors in F’(x) and R’(x), the remainder RB(x) is equal to R’(x). 

The receiver may check M’(x) validity by dividing M’(x) by G(x) and comparing the calculated remainder RC(x) 
to zero: 


MW = QC(x) + 5C(x) 

G(x) ; G(x) 

In the absence of errors in F’(x) and R’(x), the remainder RC(x) is equal to zero. 
Both methods of checking M’(x) validity are mathematically equivalent. 

4.17.4.4 CRC test cases 

Several CRC test cases are shown in table 11. 


Table 11 — CRC test cases 


Pattern 

CRC 

32 bytes each set to OOh 

OOOOh 

32 bytes each set to FFh 

A293h 

32 bytes of an incrementing pattern from OOh to 1 Fh 

0224h 

2 bytes each set to FFh followed by 30 bytes set to OOh 

21B8h 

32 bytes of a decrementing pattern from FFh to EOh 

A0B7h 


4.17.5 Application of protection information 

Before an application client transmits or receives logical blocks with protection information it shall: 

1) determine if a logical unit supports protection information using the INQUIRY command (see the 
protect bit in the standard INQUIRY data in SPC-4); 

2) if protection information is supported, then determine if the logical unit is formatted to accept 
protection information using the READ CAPACITY (16) command (see the prot_en bit in 5.13); and 

3) if the logical unit supports protection information and is not formatted to accept protection information, 
then format the logical unit with protection information enabled. 

If the logical unit supports protection information and is formatted to accept protection information, then the 
application client may use commands performing read operations that support protection information and 
should use commands performing write and verify operations that support protection information. 
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4.17.6 Protection information and commands 

The enabling of protection information enables fields in some commands that instruct the device server on the 
handling of protection information. The detailed definitions of each command’s protection information fields 
are in the individual command descriptions. 

The commands that are affected when protection information is enabled are listed in table 13 (see 5.1). 

Commands that cause a device server to return the length in bytes of each logical block (e.g., the MODE 
SENSE commands and the READ CAPACITY commands) shall cause the device server to return the length 
of the user data field, not including the length of the protection information (i.e., the logical block guard 
field, the logical block application tag field, and the logical block reference tag field) (e.g., if the user 
data plus the protection information is equal to 520 bytes then 512 is returned). 

4.18 Grouping function 

A grouping function is a function that collects information about attributes associated with commands (i.e., 
information about commands with the same group value are collected into the specified group). The definition 
of the attributes and the groups is outside the scope of this standard. Groups are identified with the group 
number field in the CDB of certain commands (e.g., the PRE-FETCH (10) command (see 5.4)). 

The collection of this information is outside the scope of this standard (e.g., the information may not be 
transmitted using any SCSI protocols). 

NOTE 7 - An example of how grouping could be used, consider two applications using a subsystem; one 
application streams data and another accesses data randomly. If the streaming application groups all of its 
commands with one value (e.g., x), and the random application groups all of its commands with another value 
(e.g., y), then a group x defined to hold performance metrics collects all the performance metrics for the 
streamed commands together and a group y defined to also hold performance metrics collects all the 
performance metrics for the random commands together. The result is two sets of performance metrics (i.e., 
x and y). A management application then reads the performance metrics and determines if the performance 
of a specific group is acceptable. 

Support for the grouping function is indicated in the group_sup bit in the Extended INQUIRY Data VPD page 
(see SPC-4). 

4.19 Background scanning operations 

4.19.1 Background scanning overview 

During background scanning, the device server, without using any bandwidth on a service delivery 
subsystem, reads logical blocks from the medium for the purpose of: 

a) identifying logical blocks that are difficult to read or unreadable; 

b) logging read problems; and 

c) when allowed, taking a vendor-specific action to make the logical block readable again. 

If a logical block is readable but requires extra actions (e.g., retries or application of a correction algorithm) to 
be read (i.e., the data is recoverable), then the device server may resolve the problem using vendor-specific 
means. The arre bit in the Read-Write Error Recovery mode page (see 6.3.5) controls whether the device 
server performs automatic reallocation of the defective logical blocks during read operations. 

If a logical block is unreadable (i.e., the data is unrecovereable), then the device server may mark the logical 
block as bad so it may be relocated. The awre bit in the Read-Write Error Recovery mode page (see 6.3.5) 
controls whether the device server performs automatic reallocation of the defective logical blocks during write 
operations. If allowed by the awre bit setting, logical blocks that have previously been noted as unrecoverable 
are reassigned at the start of the next write operation to that logical block. 

During a background scan, the device server may scan the logical blocks in any order (e.g., based on physical 
block layout). The device server should not retain any logical blocks in cache memory after they are read. 

During a background scan, the device server shall ignore pseudo unrecoverable errors with correction 
disabled, and shall process pseudo unrecoverable errors with correction enabled. 
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4.19.2 Background pre-scan 

4.19.2.1 Enabling the background pre-scan operation 

The background pre-scan operation is enabled after: 

1) the en_ps bit in the Background Control mode page (see 6.3.3) is set to zero: 

2) the en_ps bit is set to one; and 

3) the SCSI device is power cycled if; 

A) the s_l_full bit in the Background Control mode page (see 6.3.3) is set to zero, or if the 
s_l_full bit is set to one and the log is not full; and 

B) the saved value of the en_ps bit is set to one. 

After the background pre-scan operation is enabled, the device server shall: 

a) initialize the Background Pre-scan Time Limit timer to the time specified in the pre-scan time limit 
field in the Background Control mode page and start the timer; 

b) initialize the Background Medium Scan Interval timer to the time specified in the background medium 
scan interval time field in the Background Control mode page and start the timer; and 

c) begin the background pre-scan operation (i.e., begin scanning the medium). 

4.19.2.2 Suspending the background pre-scan operation 

The device server shall suspend the background pre-scan operation when any of the following occurs: 

a) a command is received from the application client; or 

b) the Background Scanning Results log page Background Medium Scan log parameters are all used 
and the s_l_full bit in the Background Control mode page (see 6.3.3) is set to one. 

When a command is received from the application client during the background pre-scan operation, the 
background pre-scan operation should be suspended within the time specified in the maximum time to 
suspend background scan field in the Background Control mode page (see 6.3.3). 

While the background pre-scan operation is suspended and not halted (see 4.19.3.2), the device server shall 
convert each write operation that accesses a logical unit that has not been scanned during the background 
pre-scan operation into a write operation followed by a verify operation to verify that the data just written was 
read back successfully. If a write operation accesses a logical unit that has already been scanned during the 
background pre-scan operation then the write operation shall be processed normally. Commands that do not 
perform write operations shall be processed normally. 

The suspended background pre-scan operation shall resume where it left off when: 

a) all commands have been completed; 

b) no ACA condition exists; 

c) the Background Scanning Results log page Background Medium Scan log parameters are not all 
used or the s_l_full bit in the Background Control mode page (see 6.3.3) is set to zero; 

d) the logical unit has been idle for the time specified in the minimum idle time before background scan 
field in the Background Control mode page (see 6.3.3); and 

e) the background pre-scan operation has not been halted (see 4.19.3.2). 

4.19.2.3 Halting the background pre-scan operation 

The device server shall halt the background pre-scan operation if any of the following occurs: 

a) the background pre-scan operation completes scanning all logical blocks on the medium; 

b) an application client sets the en ps bit to zero (see 6.3.3); 

c) the Background Pre-scan Time Limit timer expires; 

d) the device server detects a fatal error; 

e) the device server detects a vendor-specific pattern of errors; 

f) the device server detects a medium formatted without a PLIST (see 4.9); or 

g) the device server detects temperature out of range. 

To re-enable background pre-scan operation after it is halted, use the procedure described in 4.19.2.1. 
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4.19.3 Background medium scan 

4.19.3.1 Enabling the background medium scan operation 

The background medium scan operation is enabled if: 

a) the background pre-scan operation (see 4.19.2) is not enabled; 

b) the s_l_full bit in the Background Control mode page (see 6.3.3) is set to zero or the s_l_full bit is 
set to one and the log is not full; and 

c) the en bms bit in the Background Control mode page (see 6.3.3) is set to one. 

If the background medium scan operation is enabled, the device server shall begin the background medium 
scan operation (i.e., begin scanning the medium) when: 

a) the Background Medium Scan Interval timer has expired; and 

b) the logical unit has been idle for the time specified in the minimum idle time before background scan 
field in the Background Control mode page (see 6.3.3). 

After power on, if the background pre-scan operation is not enabled (see 4.19.2.1), the device server shall set 
the Background Medium Scan Interval timer to zero (i.e., expired). 

Whenever the background medium scan operation begins, the device server shall set the Background 
Medium Scan Interval timer to the time specified in the background medium scan interval time field in the 
Background Control mode page and start the timer. 

4.19.3.2 Suspending the background medium scan operation 

The device server shall suspend the background medium scan operation if any of the following occurs: 

a) a command is received from the application client; 

b) the Background Scanning Results log page Background Medium Scan log parameters are all used 
and the s_l_full bit in the Background Control mode page (see 6.3.3) is set to one; 

c) the background medium scan operation completes scanning all logical blocks on the medium; or 

d) an application client sets the en bms bit to zero (see 6.3.3). 

When a command is received from the application client, the device server should suspend the background 
medium scan operation within the time specified in the maximum time to suspend background scan field in 
the Background Control mode page (see 6.3.3). 

The suspended background medium scan operation shall resume where it left off when: 

a) all commands have been successfully completed; 

b) no ACA condition exists; 

c) the Background Scanning Results log page Background Medium Scan log parameters are not all 
used or the s_l_full bit in the Background Control mode page (see 6.3.3) is set to zero; 

d) the en_bms bit is set to one; and 

e) the logical unit has been idle for the time specified in the minimum idle time before background scan 
field in the Background Control mode page (see 6.3.3). 

4.19.3.3 Halting the background medium scan operation 

The device server shall halt the background medium scan operation if any of the following occurs: 

a) the background medium scan operation completes scanning all logical blocks on the medium; 

b) the device server detects a fatal error; 

c) the device server detects a vendor-specific pattern of errors; 

d) the device server detects a medium formatted without a plist (see 4.9); or 

e) the device server detects temperature out of range. 

To re-enable background medium scan operation after it is halted, use the procedure described in 4.19.3.1. 
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4.19.4 Interpreting the logged results 

An application client may: 

a) poll the Background Scan Results log page (see 6.2.2) to get information about pre-scan and 
background medium scan activity; or 

b) use the ebackerr bit and the mrie field in the Informational Exceptions Control mode page (see 
SPC-4) to select a method of indicating that a medium error was detected. If the ebackerr bit is set to 
one and a medium error was detected, then the device server shall return the following additional 
sense codes using the method defined in the mrie field: 

A) WARNING - BACKGROUND PRE-SCAN DETECTED MEDIUM ERROR if the failure occurs 
during a background pre-scan; or 

B) WARNING - BACKGROUND MEDIUM SCAN DETECTED MEDIUM ERROR if the failure occurs 
during a background medium scan. 

The Background Scan Results log page (see 6.2.2) Background Scanning Status parameter (see table 106) 
indicates whether a background pre-scan or background medium scan is active or suspended, the number of 
background scans performed on the medium, and the progress of a background scan that is active. This 
information may be used by an application client to monitor the background scanning operations and should 
be used by an application client after notification via an informational exception. 

The Background Medium Scan parameters (see table 109), if any, describe the location of any suspected bad 
logical blocks. The reassign status field (see table 111) indicates whether the defect was completely handled 
by the device server or whether the application client is required to take action (e.g., reassigning or re-writing 
a logical block) to fix a particular bad logical block. 

After an application client analyzes the Background Medium Scan parameters and has completed actions, if 
any, to repair the bad logical blocks, it may delete the log entries by issuing a LOG SELECT command (e.g., 
with the pcr bit set to one, or with the pc field set to 11 b and the parameter list length field set to zero) (see 
SPC-4). 

The background medium scan continues to run during log page accesses. To ensure that the log page does 
not change during a sequence of accesses, the application client shall: 

1 ) set the en_bms bit in the Background Control mode page (see 6.3.3) to zero to suspend the 
background medium scan; 

2) read the log page with LOG SENSE command; 

3) process the log page; 

4) delete the log entries with the LOG SELECT command (e.g., with the pcr bit set to one); and 

5) set the en_bms bit in the Background Control mode page (see 6.3.3) to one. 

4.20 Association between commands and CbCS permission bits 

Table 12 defines the Capability based Command Security (i.e., CbCS) permissions required for each 
command defined in this standard to be processed by a secure CDB processor. The permissions shown in 
table 12 are defined in the permissions bit mask field in the capability descriptor of a CbCS extension 
descriptor (see SPC-4). This standard does not define any permission specific to block commands. 


Table 12 — Associations between commands and CbCS permissions (part 1 of 3) 


Command name 

Permissions 

DATA 

READ 

DATA 

WRITE 

PARM 

READ 

PARM 

WRITE 

SEC 

MGMT 

RESRV 

MGMT 

PHY 

ACC 

FORMAT UNIT 


V 


V 





ORWRITE 


V 







PRE-FETCH (10) 

V 








PRE-FETCH (16) 

v 









Key: v = a secure CDB processor shall process the requested command only if the corresponding bit is set 
in the permissions bit mask field in the capability descriptor of a CbCS extension descriptor (see SPC-4). 


Working Draft SCSI Block Commands - 3 (SBC-3) 


43 









T10/1799-D Revision 16 


25 August 2008 


Table 12 — Associations between commands and CbCS permissions (part 2 of 3) 


Command name 

Permissions 

DATA 

READ 

DATA 

WRITE 

PARM 

READ 

PARM 

WRITE 

SEC 

MGMT 

RESRV 

MGMT 

PHY 

ACC 

PREVENT ALLOW MEDIUM 
REMOVAL 








V 

READ (6) 

V 








READ (10) 

v 








READ (12) 

V 








READ (16) 

V 








READ (32) 

V 








READ CAPACITY (10) 



v 






READ CAPACITY (16) 



V 






READ DEFECT DATA (10) 



V 






READ DEFECT DATA (12) 



V 






READ LONG (10) 

V 








READ LONG (16) 

V 








REASSIGN BLOCKS 









START STOP UNIT 








V 

SYNCHRONIZE CACHE (10) 


v 







SYNCHRONIZE CACHE (16) 


V 







VERIFY (10) 

V 








VERIFY (12) 

V 








VERIFY (16) 

V 








VERIFY (32) 

V 








WRITE (6) 


V 







WRITE (10) 


V 







WRITE (12) 


V 







WRITE (16) 


V 







WRITE (32) 


V 







WRITE AND VERIFY (10) 


V 







WRITE AND VERIFY (12) 


V 







WRITE AND VERIFY (16) 


V 







WRITE AND VERIFY (32) 


V 







WRITE LONG (10) 


V 







WRITE LONG (16) 


V 







WRITE SAME (10) 


V 







WRITE SAME (16) 


V 







WRITE SAME (32) 


V 







XDREAD (10) 

V 








XDREAD (32) 

V 








XDWRITE (10) 


V 







XDWRITE (32) 


V 








Key: v = a secure CDB processor shall process the requested command only if the corresponding bit is set 
in the permissions bit mask field in the capability descriptor of a CbCS extension descriptor (see SPC-4). 
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Table 12 — Associations between commands and CbCS permissions (part 3 of 3) 


Command name 

Permissions 

DATA 

READ 

DATA 

WRITE 

PARM 

READ 

PARM 

WRITE 

SEC 

MGMT 

RESRV 

MGMT 

PHY 

ACC 

XDWRITEREAD (10) 

V 

V 







XDWRITEREAD (32) 

V 

V 







XPWRITE (10) 


V 







XPWRITE (32) 


V 








Key: v = a secure CDB processor shall process the requested command only if the corresponding bit is set 
in the permissions bit mask field in the capability descriptor of a CbCS extension descriptor (see SPC-4). 


4.21 Deferred microcode activation 

After receiving a FORMAT UNIT command (see 5.2) or a START STOP UNIT command (see 5.19), a device 
server shall activate any deferred microcode that has been downloaded (see SPC-4) prior to processing the 
command. 
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5 Commands for direct-access block devices 

5.1 Commands for direct-access block devices overview 

The commands for direct-access block devices are listed in table 13. Commands with CDB or parameter data 
fields that support protection information (see 4.17) or for which protection information may be a factor in the 
processing of the command are indicated by the fourth (i.e, Protection information) column. 


Table 13 — Commands for direct-access block devices (part 1 of 3) 


Command name 

Operation 
code a 

Type b 

Protection 

information 

Reference 

ACCESS CONTROL IN 

86h 

O 

no 

SPC-4 

ACCESS CONTROL OUT 

87h 

O 

no 

SPC-4 

CHANGE ALIASES 

A4h/0Bh 

0 

no 

SPC-4 

EXTENDED COPY 

83h 

0 

no 

SPC-4 

FORMAT UNIT 

04h 

M 

yes 

5.2 

INQUIRY 

12h 

M 

yes 

SPC-4 

LOG SELECT 

4Ch 

O 

no 

SPC-4 

LOG SENSE 

4Dh 

O 

no 

SPC-4 

MAINTENANCE IN 

A3h/00h to 04 h 
A3h/06h to 09h 

X e 

no 

SCC-2 

MAINTENANCE OUT 

A4h/00h to 05h 
A4h/07h to 09h 

X e 

no 

SCC-2 

MODE SELECT (6) 

15h 

O 

no 

SPC-4 

MODE SELECT (10) 

55h 

O 

no 

SPC-4 

MODE SENSE (6) 

1Ah 

O 

no 

SPC-4 

MODE SENSE (10) 

5Ah 

O 

no 

SPC-4 

ORWRITE 

8Bh 

0 

yes 

5.3 

PERSISTENT RESERVE IN 

5Eh 

0 

no 

SPC-4 

PERSISTENT RESERVE OUT 

5Fh 

0 

no 

SPC-4 

PRE-FETCH (10) 

34 h 

0 

no 

5.4 

PRE-FETCH (16) 

90h 

0 

no 

5.5 

PREVENT ALLOW MEDIUM REMOVAL 

1Eh 

0 

no 

5.6 

READ (6) 

08h 

M c 

yes 

5.7 

READ (10) 

28h 

M 

yes 

5.8 

READ (12) 

A8h 

O 

yes 

5.9 

READ (16) 

88h 

O 

yes 

5.10 

READ (32) 

7Fh/0009h 

O 

yes 

5.11 

READ ATTRIBUTE 

8Ch 

O 

no 

SPC-4 

READ BUFFER 

3Ch 

O 

no 

SPC-4 

READ CAPACITY (10) 

25h 

M 

no 

5.12 

READ CAPACITY (16) 

9Eh/10h 

X a 

yes 

5.13 

READ DEFECT DATA (10) 

37h 

O 

no 

5.14 

READ DEFECT DATA (12) 

B7h 

O 

no 

5.15 

READ LONG (10) 

3Eh 

0 

yes 

5.16 

READ LONG (16) 

9Eh/11h 

0 

yes 

5.17 

REASSIGN BLOCKS 

07h 

0 

no 

5.18 
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Table 13 — Commands for direct-access block devices (part 2 of 3) 


Command name 

Operation 
code a 

Type b 

Protection 

information 

Reference 

RECEIVE COPY RESULTS 

84h 

O 

no 

SPC-4 

RECEIVE DIAGNOSTIC RESULTS 

ICh 

O/M f 

no 

SPC-4 

REDUNDANCY GROUP IN 

BAh 

X e 

no 

SCC-2 

REDUNDANCY GROUP OUT 

BBh 

X e 

no 

SCC-2 

REPORT ALIASES 

A3h/0Bh 

0 

no 

SPC-4 

REPORT DEVICE IDENTIFIER 

A3h/05h 

0 

no 

SPC-4 

REPORT LUNS 

AOh 

M 

no 

SPC-4 

REPORT PRIORITY 

A3h/0Eh 

O 

no 

SPC-4 

REPORT SUPPORTED OPERATION CODES 

A3h/0Ch 

0 

no 

SPC-4 

REPORT SUPPORTED TASK MANAGEMENT 
FUNCTIONS 

A3h/0Dh 

0 

no 

SPC-4 

REPORT TARGET PORT GROUPS 

A3h/0Ah 

0 

no 

SPC-4 

REQUEST SENSE 

03h 

M 

no 

SPC-4 

SECURITY PROTOCOL IN 

A2h 

O 

no 

SPC-4 

SECURITY PROTOCOL OUT 

B5h 

O 

no 

SPC-4 

SEND DIAGNOSTIC 

IDh 

M 

no 

SPC-4 

SET DEVICE IDENTIFIER 

A4h/06h 

O 

no 

SPC-4 

SET PRIORITY 

A4h/0Eh 

O 

no 

SPC-4 

SET TARGET PORT GROUPS 

A4h/0Ah 

O 

no 

SPC-4 

SPARE IN 

BCh 

X e 

no 

SCC-2 

SPARE OUT 

BDh 

X e 

no 

SCC-2 

START STOP UNIT 

IBh 

O 

no 

5.19 

SYNCHRONIZE CACHE (10) 

35h 

0 

no 

5.20 

SYNCHRONIZE CACHE (16) 

91h 

0 

no 

5.21 

TEST UNIT READY 

OOh 

M 

no 

SPC-4 

VERIFY (10) 

2Fh 

O 

yes 

5.22 

VERIFY (12) 

AFh 

O 

yes 

5.23 

VERIFY (16) 

8Fh 

O 

yes 

5.24 

VERIFY (32) 

7Fh/000Ah 

O 

yes 

5.25 

VOLUME SET IN 

BEh 

X e 

no 

SCC-2 

VOLUME SET OUT 

BFh 

X e 

no 

SCC-2 

WRITE (6) 

OAh 

0 c 

yes 

5.26 

WRITE (10) 

2Ah 

0 

yes 

5.27 

WRITE (12) 

AAh 

0 

yes 

5.28 

WRITE (16) 

8Ah 

0 

yes 

5.29 

WRITE (32) 

7Fh/000Bh 

0 

yes 

5.30 

WRITE AND VERIFY (10) 

2Eh 

0 

yes 

5.31 

WRITE AND VERIFY (12) 

AEh 

0 

yes 

5.32 

WRITE AND VERIFY (16) 

8Eh 

0 

yes 

5.33 

WRITE AND VERIFY (32) 

7Fh/000Ch 

0 

yes 

5.34 

WRITE ATTRIBUTE 

8Dh 

0 

no 

SPC-4 

WRITE BUFFER 

3Bh 

0 

no 

SPC-4 
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Table 13 — Commands for direct-access block devices (part 3 of 3) 


Command name 

Operation 
code a 

Type b 

Protection 

information 

Reference 

WRITE LONG (10) 

3Fh 

O 

yes 

5.35 

WRITE LONG (16) 

9Fh/11h 

O 

yes 

5.36 

WRITE SAME (10) 

41h 

0 

yes 

5.37 

WRITE SAME (16) 

93h 

0 

yes 

5.38 

WRITE SAME (32) 

7Fh/000Dh 

0 

yes 

5.39 

XDREAD (10) 

52h 

0 

yes 

5.40 

XDREAD (32) 

7Fh/0003h 

0 

yes 

5.41 

XDWRITE (10) 

50h 

0 

yes 

5.42 

XDWRITE (32) 

7Fh/0004h 

0 

yes 

5.43 

XDWRITEREAD (10) 

53h 

0 

yes 

5.44 

XDWRITEREAD (32) 

7Fh/0007h 

0 

yes 

5.45 

XPWRITE (10) 

51h 

0 

yes 

5.46 

XPWRITE (32) 

7Fh/0006h 

0 

yes 

5.47 

The following operation codes are vendor-specific: 

02h, 05h, 06h, 09h, OCh, ODh, OEh, OFh, 
lOh, 11 h, 13h, 14h, 19h, 

20h, 21 h, 22h, 23h, 24h, 26h, 27h, 29h, 2Ch, 2Dh, and 

COh to FFh. 




All operation codes for direct-access block devices not specified in this table are reserved for future 
standardization. 

M Some commands are defined by a combination of operation code and service action. The operation 
code value is shown preceding the slash and the service action value is shown after the slash. 
b M = command implementation is mandatory. O = command implementation is optional. X = Command 
implementation requirements detailed in the reference. 
c Application clients should migrate from READ (6) to READ (10) (see 5.7) and from WRITE (6) to 

WRITE (10) (see 5.26). 

d READ CAPACITY (16) is mandatory if protection information is supported and optional otherwise. 
e If the sees bit is set to one in the standard INQUIRY data (see SPC-4), then these commands shall be 
supported as required by SCC-2. If the secs bit is set to zero, then these commands shall not be 
supported. 

f This command shall be supported if the encserv bit is set to one in the standard INQUIRY data (see 
SPC-4) and may be supported otherwise. 


The commands for direct-access block devices that are obsolete are listed in table 14. 

Table 14 — Obsolete commands for direct-access block devices (part 1 of 2) 


Command name 

Operation code 

CHANGE DEFINITION 

40h 

COMPARE 

39h 

COPY 

18h 

COPY AND VERIFY 

3Ah 

LOCK UNLOCK CACHE (10) 

36h 

LOCK UNLOCK CACHE (16) 

92h 

MOVE MEDIUM ATTACHED 

A7h 

READ ELEMENT STATUS ATTACHED 

B4h 

REBUILD (16) 

81h 
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Table 14 — Obsolete commands for direct-access block devices (part 2 of 2) 


Command name 

Operation code 

REGENERATE (16) 

82h 

RELEASE (6) 

17h 

RESERVE (10) 

56 h 

RESERVE (6) 

16h 

RELEASE (1 Oh) 

57h 

REZERO 

Olh 

SEARCH DATA EQUAL (10) 

31 h 

SEARCH DATA HIGH (10) 

30h 

SEARCH DATA LOW (10) 

32h 

SEEK (6) 

OBh 

SEEK (10) 

2Bh 

SET LIMITS (10) 

33h 

SET LIMITS (12) 

B3h 

XDWRITE EXTENDED (16) 

80h 


5.2 FORMAT UNIT command 

5.2.1 FORMAT UNIT command overview 

The FORMAT UNIT command (see table 15) requests that the device server format the medium into 
application client accessible logical blocks as specified in the number of logical blocks and logical block length 
values received in the last mode parameter block descriptor (see 6.3.2) in a MODE SELECT command (see 
SPC-4). In addition, the device server may certify the medium and create control structures for the 
management of the medium and defects. The degree that the medium is altered by this command is 
vendor-specific. 

If a device server receives a FORMAT UNIT command before receiving a MODE SELECT command with a 
mode parameter block descriptor, then the device server shall use the number of logical blocks and logical 
block length at which the logical unit is currently formatted (i.e., no change is made to the number of logical 
blocks and the logical block length of the logical unit during the format operation). 

If any deferred downloaded code has been received as a result of a WRITE BUFFER command (see SPC-4), 
then that deferred downloaded code shall replace the current operational code. 


Table 15 — FORMAT UNIT command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (04h) 

1 

FMTPINFO LONGLIST FMTDATA CMPLST DEFECT LIST FORMAT 

2 

Vendor-specific 

3 

Obsolete 

4 


5 

CONTROL 


The simplest form of the FORMAT UNIT command (i.e., a FORMAT UNIT command with no parameter data) 
accomplishes medium formatting with little application client control over defect management. The device 
server implementation determines the degree of defect management that is to be performed. Additional forms 
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of this command increase the application client's control over defect management. The application client may 
specify: 

a) defect list(s) to be used; 

b) defect locations; 

c) that logical unit certification be enabled; and 

d) exception handling in the event that defect lists are not accessible. 

While performing a format operation, the device server shall terminate all commands except INQUIRY 
commands, REPORT LUNS commands, and REQUEST SENSE commands with CHECK CONDITION status 
with the sense key set to NOT READY and the additional sense code set to LOGICAL UNIT NOT READY, 
FORMAT IN PROGRESS. If the device server receives an INQUIRY command, a REPORT LUNS 
commands, or a REQUEST SENSE command, then the device server shall process the command. The 
device server shall return data for an INQUIRY command based on the condition of the SCSI target device 
before beginning the FORMAT UNIT command (i.e., INQUIRY data shall not change until after successful 
completion of a format operation). The processing of commands in the task set when a FORMAT UNIT 
command is received is vendor-specific. 

The progress indication field in parameter data returned by the device server in response to a REQUEST 
SENSE command (see SPC-4) may be used by the application client at any time during a format operation to 
poll the logical unit’s progress. While a format operation is in progress unless an error has occurred, a device 
server shall respond to a REQUEST SENSE command by returning parameter data containing sense data 
with the sense key set to NOT READY and the additional sense code set to LOGICAL UNIT NOT READY, 
FORMAT IN PROGRESS with the sense key specific bytes set for progress indication (see SPC-4). 

The operation code field is defined in SPC-4 and shall be set to the value defined in table 15. 

The format protection information (fmtpinfo) field (see table 20) in combination with the protection field 
usage field (see 5.2.2.2) specifies whether or not the device server enables or disables the use of protection 
information. 

Following a successful format, the p_type field in the READ CAPACITY (16) parameter data (see 5.13.1) 
indicates the type of protection currently in effect on the logical unit. 

When protection information is written during a FORMAT UNIT command (i.e., the fmtpinfo field is set to a 
value greater than zero), protection information shall be written to a default value of 
FFFF_FFFF_FFFF_FFFFh. 

A longlist bit set to zero specifies that the parameter list, if any, contains a short parameter list header as 
defined in table 18. A longlist bit set to one specifies that the parameter list, if any, contains a long parameter 
list header as defined in table 19. If the fmtdata bit is set to zero, then the longlist bit shall be ignored. 

A format data (fmtdata) bit set to zero specifies that no parameter list be transferred from the data-out buffer. 

A fmtdata bit set to one specifies that the FORMAT UNIT parameter list (see table 17) shall be transferred 
from the data-out buffer. The parameter list consists of a parameter list header, followed by an optional 
initialization pattern descriptor, followed by an optional defect list. 

A complete list (cmplst) bit set to zero specifies that the defect list included in the FORMAT UNIT parameter 
list shall be used in an addition to the existing list of defects. As a result, the device server shall construct a 
new GLIST (see 4.9) that contains: 

a) the existing GLIST; 

b) the DLIST, if it is sent by the application client; and 

c) the CLIST, if certification is enabled (i.e., the device server may add any defects it detects during the 
format operation). 

A cmplst bit set to one specifies that the defect list included in the FORMAT UNIT parameter list is a complete 
list of defects. Any existing defect list except the PLIST shall be ignored by the device server. As a result, the 
device server shall construct a new GLIST (see 4.9) that contains: 

a) the DLIST, if it is sent by the application client; and 

b) the CLIST, if certification is enabled (i.e., the device server may add any defects it detects during the 
format operation). 
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If the fmtdata bit is set to zero, then the cmplst bit shall be ignored. 

If the fmtdata bit is set to one, then the defect list format field specifies the format of the address 
descriptors in the defect list (see table 16). 

Table 16 defines the address descriptor usage for the FORMAT UNIT command. 

The contents of the control byte are defined in SAM-4. 


Table 16 — FORMAT UNIT command address descriptor usage 


Field in the FORMAT UNIT CDB 

DEFECT LIST LENGTH 

field in the 
parameter list 
header 

Type a 

Comments f 

FMTDATA 

CMPLST 

DEFECT 

LIST 

FORMAT 

0 

any 

000b 

Not available 

M 

Vendor-specific defect information 

1 

0 

000b 

(short 

block) 

Zero 

O 

See b and d 

1 

O 

See b and e 

0 

Nonzero 

O 

See c and d 

1 

O 

See b and e 

1 

0 

011b 

(long 

block) 

Zero 

0 

See b and d 

1 

0 

See b and e 

0 

Nonzero 

0 

See c and d 

1 

0 

See c and e 

1 

0 

100b 

(bytes 

from 

index) 

Zero 

0 

See b and d 

1 

0 

See b and e 

0 

Nonzero 

0 

See c and d 

1 

0 

See c and e 

1 

0 

101b 

(physical 

sector) 

Zero 

0 

See b and d 

1 

0 

See b and e 

0 

Nonzero 

0 

See c and d 

1 

0 

See c and e 

1 

0 

110b 

(vendor- 

specific) 

Vendor-specific 

0 


1 

0 


All others 

Reserved. 


a M = implementation is mandatory. O = implementation is optional. 
b No DUST is included in the parameter list. 

c A DUST is included in the parameter list. The device server shall add the DUST defects to the new 
GUST. 

d The device server shall add existing GUST defects to the new GUST (i.e., use the existing GUST). 
e The device server shall not add existing GUST defects to the new GUST (i.e., discard the existing 
GUST). 

f All the options described in this table cause a new GUST to be created during processing of the 
FORMAT UNIT command as described in the text. 
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5.2.2 FORMAT UNIT parameter list 

5.2.2.1 FORMAT UNIT parameter list overview 

Table 17 defines the FORMAT UNIT parameter list. 


Table 17 — FORMAT UNIT parameter list 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 to 3 or 

0 to 7 

Parameter list header (see table 18 or table 19 in 5.2.2.2) 



Initialization pattern descriptor (if any)(see table 21 in 5.2.2.3) 







Defect list (if any) 






The parameter list header is defined in 5.2.2.2. 

The initialization pattern descriptor, if any, is defined in 5.2.2.3. 

The defect list, if any, contains address descriptors (see 5.2.2.4) each specifying a location on the medium 
that the device server shall exclude from the application client accessible part. This is called the DUST (see 
4.9). The device server shall maintain the current logical block to physical block alignment (see 4.5) for logical 
blocks not specified in the defect list. 

5.2.2.2 Parameter list header 

The parameter list headers (see table 18 and table 19) provide several optional format control parameters. 
Device servers that implement these headers provide the application client additional control over the use of 
the four defect sources, and the format operation. If the application client attempts to select any function not 
implemented by the device server, then the device server shall terminate the command with CHECK 
CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set to 
INVALID FIELD IN PARAMETER LIST. 

If the longlist bit is set to zero in the FORMAT UNIT CDB, then the short parameter list header (see table 18) 
is used. 


Table 18 — Short parameter list header 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

Reserved 

PROTECTION FIELD USAGE 

1 

FOV 

DPRY 

DCRT 

STPF 

IP 

Obsolete 

IMMED 

Vendor- 

specific 

2 

(MSB) 

DEFECT LIST LENGTH 


3 


(LSB) 
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If the longlist bit is set to one in the FORMAT UNIT CDB, then the long parameter list header (see table 19) 
is used. 


Table 19 — Long parameter list header 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

Reserved 

PROTECTION FIELD USAGE 

1 

FOV 

DPRY 

DCRT 

STPF 

ip 

Obsolete 

IMMED 

Vendor- 

specific 

2 

Reserved 

3 

Reserved 

4 

(MSB) 



nPPFP.T 1 IQT 1 FMPTW 




7 








(LSB) 


| The protection field usage field in combination with the fmtpinfo field (see table 20) specifies the 
requested protection type (see 4.17.2). 

| Table 20 — fmtpinfo field and protection field usage field (part 1 of 2) 


Device server 
indication 

Application client 
specification 

Description 

SPT a 

PROTECT b 

FMTPINFO 

PROTECTION 

FIELD USAGE 

xxxb 

0 

00b 

000b 

The logical unit shall be formatted to type 0 protection 
c (see 4.17.2.2) resulting in the p type field d being 
set to 000b. 

xxxb 

0 

00b 

>000b 

Illegal e 

xxxb 

0 

01b 

xxxb 

Illegal f 

xxxb 

0 

Ixb 

xxxb 

Illegal f 

xxxb 

1 

00b 

000b 

The logical unit shall be formatted to type 0 protection 
c (see 4.17.2.2) resulting in the p_type field d being 
set to 000b. 

xxxb 

1 

00b 

>000b 

Illegal e 

xxxb 

1 

01b 

xxxb 

Illegal f 


a See the Extended INQUIRY Data VPD page (see SPC-4) for the definition of the spt field. 
b See the standard INQUIRY data (see SPC-4) for the definition of the protect bit. 
c The device server shall format the medium to the logical block length specified in the mode parameter 
block descriptor of the mode parameter header (see SPC-4). 
d See the READ CAPACITY command (see 5.13.1) for the definition of the p_type field. 
e The device server shall terminate the command with CHECK CONDITION status with the sense key set 
to ILLEGAL REQUEST and the additional sense code set to INVALID FIELD IN PARAMETER LIST. 
f The device server shall terminate the command with CHECK CONDITION status with the sense key set 
to ILLEGAL REQUEST and the additional sense code set to INVALID FIELD IN CDB. 

9 The device server shall format the medium to the logical block length specified in the mode parameter 
block descriptor of the mode parameter header plus eight (e.g., if the logical block length is 512, then the 
formatted logical block length is 520). Following a successful format, the prot en bit in the READ 
CAPACITY (16) parameter data (see 5.13.1) indicates whether protection information (see 4.17) is 
enabled. 
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Table 20 — fmtpinfo field and protection field usage field (part 2 of 2) 


Device server 
indication 

Application client 
specification 

Description 

SPT a 

PROTECT b 

FMTPINFO 

PROTECTION 

FIELD USAGE 

000b 

001b 

011b 

1 

10b 

000b 

The logical unit shall be formatted to type 1 protection 

9 (see 4.17.2.3) resulting in the p_type field d being 
set to 000b. 

000b 

001b 

011b 

1 

10b 

>000b 

Illegal e 

000b 

1 

11b 

xxxb 

Illegal f 

001b 

1 

11b 

000b 

The logical unit shall be formatted to type 2 protection 

9 (see 4.17.2.4) resulting in the p type field d being 
set to 001b. 

001b 

1 

11b 

>000b 

Illegal e 

011b 

1 

11b 

000b 

Illegal e 

011b 

1 

1 

001b 

The logical unit shall be formatted to type 3 protection. 

9 (see 4.17.2.5) resulting in the p_type field d being 
set to 010b. 

011b 

1 

11b 

>001 b 

Illegal e 

010b 

1 

Ixb 

xxxb 

Reserved 

Ixxb 

1 

Ixb 

xxxb 

Reserved 


a See the Extended INQUIRY Data VPD page (see SPC-4) for the definition of the spt field. 

b See the standard INQUIRY data (see SPC-4) for the definition of the protect bit. 

c The device server shall format the medium to the logical block length specified in the mode parameter 


block descriptor of the mode parameter header (see SPC-4). 
d See the READ CAPACITY command (see 5.13.1) for the definition of the p_type field. 
e The device server shall terminate the command with CHECK CONDITION status with the sense key set 
to ILLEGAL REQUEST and the additional sense code set to INVALID FIELD IN PARAMETER LIST. 
f The device server shall terminate the command with CHECK CONDITION status with the sense key set 
to ILLEGAL REQUEST and the additional sense code set to INVALID FIELD IN CDB. 

9 The device server shall format the medium to the logical block length specified in the mode parameter 
block descriptor of the mode parameter header plus eight (e.g., if the logical block length is 512, then the 
formatted logical block length is 520). Following a successful format, the prot en bit in the READ 
CAPACITY (16) parameter data (see 5.13.1) indicates whether protection information (see 4.17) is 
enabled. 


A format options valid (fov) bit set to zero specifies that the device server shall use its default settings for the 
dpry bit, the dcrt bit, the stpf bit, and ip bit. If the fov bit is set to zero, then the application client shall set 
these bits to zero. If the fov bit is set to zero, and any of the other bits listed in this paragraph are not set to 
zero, then the device server shall terminate the command with CHECK CONDITION status with the sense key 
set to ILLEGAL REQUEST and the additional sense code set to INVALID FIELD IN PARAMETER LIST. 

A fov bit set to one specifies that the device server shall examine the values of the dpry, dcrt, stpf, and ip 
bits. When the fov bit is set to one, the dpry, dcrt, stpf, and ip bits are defined as follows. 

A disable primary (dpry) bit set to zero specifies that the device server shall not use parts of the medium 
identified as defective in the PLIST for application client accessible logical blocks. If the device server is not 
able to locate the PLIST or it is not able to determine whether a PLIST exists, then the device server shall take 
the action specified by the stpf bit. 

A dpry bit set to one specifies that the device server shall not use the PLIST to identify defective areas of the 
medium. The PLIST shall not be deleted. 
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A disable certification (dcrt) bit set to zero specifies that the device server shall perform a vendor-specific 
medium certification operation to generate a CLIST. A dcrt bit set to one specifies that the device server shall 
not perform any vendor-specific medium certification process or format verification operation. 

The stop format (stpf) bit controls the behavior of the device server if one of the following events occurs: 

a) The device server has been requested to use the PLIST (i.e., the dpry bit is set to zero) or the GLIST 
(i.e., the cmplst bit is set to zero) and the device server is not able to locate the list or determine 
whether the list exists; or 

b) The device server has been requested to use the PLIST (i.e., the dpry bit is set to zero) or the GLIST 
(i.e., the cmplst bit is set to zero), and the device server encounters an error while accessing the 
defect list. 

A stpf bit set to zero specifies that, if one or both of these events occurs, the device server shall continue to 
process the FORMAT UNIT command. The device server shall terminate the FORMAT UNIT command with 
CHECK CONDITION status at the completion of the command with the sense key set to RECOVERED 
ERROR and the additional sense code set to either DEFECT LIST NOT FOUND if the condition described in 
item a) occurred, or DEFECT LIST ERROR if the condition described in item b) occurred. 

A stpf bit set to one specifies that, if one or both of these events occurs, then the device server shall 
terminate the FORMAT UNIT command with CHECK CONDITION status and the sense key shall be set to 
MEDIUM ERROR with the additional sense code set to either DEFECT LIST NOT FOUND if the condition 
described in item a) occurred, or DEFECT LIST ERROR if the condition described in item b) occurred. 

NOTE 8 - The use of the FMTDATA bit, the CMPLST bit, and the parameter list header allow the application 
client to control the source of the defect lists used by the FORMAT UNIT command. Setting the DEFECT LIST 
LENGTH field to zero allows the application client to control the use of PLIST and CLIST without having to 
specify a DLIST. 

An initialization pattern (ip) bit set to zero specifies that an initialization pattern descriptor is not included and 
that the device server shall use its default initialization pattern. An ip bit set to one specifies that an 
initialization pattern descriptor (see 5.2.2.3) is included in the FORMAT UNIT parameter list following the 
parameter list header. 

An immediate (immed) bit set to zero specifies that the device server shall return status after the format 
operation has completed. An immed bit value set to one specifies that the device server shall return status 
after the entire parameter list has been transferred. 

The defect list length field specifies the total length in bytes of the defect list (i.e., the address descriptors) 
that follows and does not include the initialization pattern descriptor, if any. The formats for the address 
descriptor(s) are shown in 5.2.2.4. 

Short block format address descriptors and long block format address descriptors should be in ascending 
order. Bytes from index format address descriptors and physical sector format address descriptors shall be in 
ascending order. More than one physical or logical block may be affected by each address descriptor. If the 
address descriptors are not in the required order, then the device server shall terminate the command with 
CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set 
to INVALID FIELD IN PARAMETER LIST. 
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5.2.2.3 Initialization pattern descriptor 

The initialization pattern descriptor specifies that the device server initialize logical blocks to a specified 
pattern. The initialization pattern descriptor (see table 21) is sent to the device server as part of the FORMAT 
UNIT parameter list. 


Table 21 — Initialization pattern descriptor 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

IP MODIFIER 

SI 

Reserved 

1 

INITIALIZATION PATTERN TYPE 

2 

(MSB) 

INITIALIZATION PATTERN LENGTH (n - 3) 


3 


(LSB) 

4 


INITIALIZATION PATTERN 


n 




The initialization pattern modifier (ip modifier) field (see table 22) specifies the type and location of a header 
that modifies the initialization pattern. 


Table 22 — Initialization pattern modifier (ip modifier) field 


Code 

Description 

00b 

No header. The device server shall not modify the initialization pattern. 

01b 

The device server shall overwrite the initialization pattern to write the LBA in the first four bytes 
of each logical block. The LBA shall be written with the most significant byte first. If the LBA is 
larger than four bytes, then the least significant four bytes shall be written ending with the least 
significant byte. 

10b 

The device server shall overwrite the initialization pattern to write the LBA in the first four bytes 
of each physical block contained within the logical block. The lowest numbered logical block or 
part thereof that occurs within the physical block is used. The LBA shall be written with the 
most significant byte first. If the LBA is larger than four bytes, then the least significant four 
bytes shall be written ending with the least significant byte. 

11b 

Reserved. 


A security initialize (si) bit set to one specifies that the device server shall attempt to write the initialization 
pattern to all areas of the medium including those that may have been reassigned (i.e., are in a defect list). An 
Si bit set to one shall take precedence over any other FORMAT UNIT CDB field. The initialization pattern shall 
be written using a security erasure write technique. Application clients may choose to use this command 
multiple times to fully erase the previous data. Such security erasure write technique procedures are outside 
the scope of this standard. The exact requirements placed on the security erasure write technique are 
vendor-specific. The intent of the security erasure write is to render any previous user data unrecoverable by 
any analog or digital technique. 

An si bit set to zero specifies that the device server shall initialize the application client accessible part of the 
medium. The device server is not required to initialize other areas of the medium. However, the device server 
shall format the medium as defined in the FORMAT UNIT command. 

When the si bit is set to one, the device server need not write the initialization pattern over the header and 
other parts of the medium not previously accessible to the application client. If the device server is unable to 
write over any part of the medium that is currently accessible to the application client or may be made 
accessible to the application client in the future (e.g., by clearing the defect list), then the device server shall 
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terminate the command with CHECK CONDITION status with the sense key set to MEDIUM ERROR and the 
additional sense code set to the appropriate value for the condition. The device server shall attempt to rewrite 
all remaining parts of the medium even if some parts are not able to be rewritten. 

The initialization pattern type field (see table 23) specifies the type of pattern the device server shall use to 
initialize each logical block within the application client accessible part of the medium. All bytes within a logical 
block shall be written with the initialization pattern. The initialization pattern is modified by the ip modifier field 
as described in table 22. 


Table 23 — initialization pattern type field 


Code 

Description 

OOh 

Use a default initialization pattern a 

Olh 

Repeat the pattern specified in the initialization pattern field as required to fill the logical 
block b 

02h to 7Fh 

Reserved 

80h to FFh 

Vendor-specific 

a If the initialization pattern length field is not set to zero, then the device server shall terminate the 
command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the 
additional sense code set to INVALID FIELD IN PARAMETER LIST. 
b If the initialization pattern length field is set to zero, then the device server shall terminate the 
command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the 
additional sense code set to INVALID FIELD IN PARAMETER LIST. 


The initialization pattern length field specifies the number of bytes contained in the initialization pattern 
field. If the initialization pattern length exceeds the current logical block length, then the device server shall 
terminate the command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and 
the additional sense code set to INVALID FIELD IN PARAMETER LIST. 

The initialization pattern field specifies the initialization pattern. The initialization pattern is modified by the 
ip modifier field. 

5.2.2.4 Address descriptor formats 
5.2.2.4.1 Address descriptor formats overview 

This subclause describes the address descriptor formats used in the FORMAT UNIT command, the READ 
DEFECT DATA commands (see 5.14 and 5.15), and the Translate Address diagnostic pages (see 6.1.2 and 
6.1.3) of the SEND DIAGNOSTIC command and the RECEIVE DIAGNOSTIC RESULTS command. 

The format type of an address descriptor is specified with: 

a) the DEFECT LIST FORMAT field in the CDB, for the FORMAT UNIT command and the READ DEFECT 
DATA commands; 

b) the supplied format field, for the Translate Address diagnostic pages; or 

c) the translate format field, for the Translate Address diagnostic pages. 
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Table 24 defines the types of address descriptors. 

Table 24 — Address descriptor formats 


Format type 

Description 

Reference 

000b 

Short block format address descriptor 

5.2.2.4.2 

011b 

Long block format address descriptor 

5.2.2.4.3 

100b 

Bytes from index format address descriptor 

5.2.2.4.4 

101b 

Physical sector format address descriptor 

5.2.2.4.5 

110b 

Vendor-specific 

All others 

Reserved 


5.2.2.4.2 Short block format address descriptor 

A format type of 000b specifies the short block format address descriptor defined in table 25. 


Table 25 — Short block format address descriptor (000b) 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 

SHORT BLOCK ADDRESS 


3 


(LSB) 


For the FORMAT UNIT command, the short block address field contains the four-byte LBA of a defect. If 
multiple logical blocks are contained within a physical block, then the device server may consider logical 
blocks in addition to the one specified by this descriptor as containing defects. 

For the READ DEFECT DATA commands, the short block address field contains a vendor-specific 
four-byte value. 

For the Translate Address diagnostic pages, the short block address field contains a four-byte LBA or a 
vendor-specific four byte value that is greater than the capacity of the medium. 

5.2.2.4.3 Long block format address descriptor 

A format type of 011 b specifies the long block format address descriptor defined in table 26. 


Table 26 — Long block format address descriptor (011b) 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 

LONG BLOCK ADDRESS 


7 


(LSB) 


For the FORMAT UNIT command, the long block address field contains the eight-byte LBA of a defect. If 
multiple logical blocks are contained within a physical block, then the device server may consider logical 
blocks in addition to the one specified by this descriptor as containing defects. 

For the READ DEFECT DATA commands, the long block address field contains a vendor-specific 
eight-byte value. 

For the Translate Address diagnostic pages, the long block address field contains a eight-byte LBA or a 
vendor-specific eight-byte value that is greater than the capacity of the medium. 
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5.2.2.4.4 Bytes from index format address descriptor 

A format type of 100b specifies the bytes from index address descriptor defined in table 27. For the FORMAT 
UNIT command and the READ DEFECT DATA commands, this descriptor specifies the location of a defect 
that is either the length of one track or is no more than eight bytes long. For the Translate Address diagnostic 
pages, this descriptor specifies the location of a track or the first byte or last byte of an area. 


Table 27 — Bytes from index format address descriptor (100b) 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 

CYLINDER NUMBER 


2 


(LSB) 

3 

HEAD NUMBER 

4 

(MSB) 

BYTES FROM INDEX 


7 


(LSB) 


The cylinder number field contains the cylinder number. 

The head number field contains the head number. 

The bytes from index field contains the number of bytes from the index (e.g., from the start of the track) to 
the location being described. A bytes from index field set to FFFF_FFFFh specifies that the entire track is 
being described. 

For sorting bytes from index format address descriptors, the cylinder number is the most significant part of the 
address and the bytes from index is the least significant part of the address. More than one logical block may 
be described by this descriptor. 

5.2.2.4.5 Physical sector format address descriptor 

A format type of 101b specifies the physical sector address descriptor defined in table 28. For the FORMAT 
UNIT command and the READ DEFECT DATA commands, this descriptor specifies the location of a defect 
that is either the length of one track or the length of one sector. For the Translate Address diagnostic pages, 
this descriptor specifies the location of a track or a sector. 


Table 28 — Physical sector format address descriptor (101b) 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 

CYLINDER NUMBER 


2 


(LSB) 

3 

HEAD NUMBER 

4 

(MSB) 

SECTOR NUMBER 


7 


(LSB) 


The cylinder number field contains the cylinder number. 

The head number field contains the head number. 

The sector number field contains the sector number. A sector number field set to FFFF_FFFFh specifies 
that the entire track is being described. 
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For sorting physical sector format address descriptors, the cylinder number is the most significant part of the 
address and the sector number is the least significant part of the address. More than one logical block may be 
described by this descriptor. 

5.3 ORWRITE command 

The ORWRITE command (see table 29) requests that the device server perform the following as an 
uninterrupted series of actions: 

1) read the specified logical block(s); 

2) transfer logical blocks from the data-out buffer; 

3) perform an OR operation with user data contained in the logical blocks transferred from the data-out 
buffer and the logical blocks read, storing the data resulting from the OR operation in a buffer; and 

4) write the logical blocks from that buffer. 

Each logical block includes user data and may include protection information, based on the orprotect field 
and the medium format. 


Table 29 — ORWRITE command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (8Bh) 

1 

ORPROTECT DPO fua Reserved fua_nv Reserved 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

9 

..~ (LSB) 

10 

(MSB) 

TRANSFER LENGTH 

13 

(LSB) 

14 

Reserved group number 

15 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 29. 

See the WRITE (10) command (see 5.27) for the definitions of the fua bit and the fua_nv bit. See the READ 
(10) command (see 5.8) for the definition of the dpo bit. See the PRE-FETCH (10) command (see 5.4) for the 
definition of the logical block address field. See the PRE-FETCH (10) command (see 5.4) and 4.18 for the 
definition of the group number field. 

The transfer length field specifies the number of contiguous logical blocks of data that are read, transferred 
from the data-out buffer, and ORed into a buffer, starting with the logical block specified by the logical block 
address field. If the logical block address plus the transfer length exceeds the capacity of the medium, then 
the device server shall terminate the command with CHECK CONDITION status with the sense key set to 
ILLEGAL REQUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF RANGE. 
The transfer length field is constrained by the maximum transfer length field in the Block Limits VPD 
page (see 6.4.2). 

The contents of the control byte are defined in SAM-4. 

The device server shall: 

a) check protection information read from the medium based on the orprotect field as described in 
table 30; and 

b) check protection information transferred from the data-out buffer based on the orprotect field as 
described in table 31. 
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If the check of protection information read from the medium and check protection information transferred from 
the data-out buffer is successful, then the device server shall set the protection information (see 4.17) as it 
writes each logical block to the medium as follows: 

a) the logical block guard field set to a CRC properly generated (see 4.17.4) by the device server; 

b) the LOGICAL BLOCK reference tag field set to the same LOGICAL BLOCK reference tag field received 
from the data-out buffer; and 

c) the LOGICAL BLOCK application tag field set to the same logical block application tag field 
received from the data-out buffer. 

The order of the user data and protection information checks and comparisons is vendor-specific. 

The device server shall check the protection information read from the medium based on the orprotect field 
as described in table 30. 


Table 30 — orprotect field - checking protection information read from the medium (part 1 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 9 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 

000b 

Yes 

LOGICAL 

BLOCK GUARD 

GRD_CHK=1 

LOGICAL BLOCK GUARD CHECK FAILED 

GRD_CHK=0 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

APP_CHK= 1 c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 

APP_CHK=0 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

REF_CHK = 1 h 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

REF_CHK=0 

No check performed 

No 

No protection information on the medium to check. Only user data is checked. 

001b 
101b b 

Yes 

LOGICAL 

BLOCK GUARD 

GRD_CHK=1 

LOGICAL BLOCK GUARD CHECK FAILED 

GRD_CHK=0 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

APP_CHK= 1 c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 

APP_CHK=0 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

REF_CHK = 1 h 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

REF_CHK=0 

No check performed 

No 

Error condition a 

010b b 

Yes 

LOGICAL 

BLOCK GUARD 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

APP_CHK= 1 c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 

APP_CHK=0 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

REF_CHK = 1 h 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

REF_CHK=0 

No check performed 

No 

Error condition a 
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Table 30 — orprotect field - checking protection information read from the medium (part 2 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 9 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 

011b b 

Yes 

LOGICAL 

BLOCK GUARD 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

No check performed 

No 

Error condition a 

100b b 

Yes 

LOGICAL 

BLOCK GUARD 

GRD_CHK=1 

LOGICAL BLOCK GUARD CHECK FAILED 

GRD_CHK=0 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

No check performed 

No 

Error condition a 

110b 

to 

111b 

Reserved 
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Table 30 — orprotect field - checking protection information read from the medium (part 3 of 3) 


Code 

Logical unit 
formatted 
with 

Field in 
protection 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 


protection 

information 

information 9 



a An or write operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK CONDITION 
status with the sense key set to ILLEGAL REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
requested command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST 
and the additional sense code set to INVALID FIELD IN CDB. 
c The device server shall check the logical block application tag if it has knowledge of the contents of the 
logical block application tag field. This knowledge may be obtained by a method not defined by this 
standard. 

d If the device server terminates the command with CHECK CONDITION status, then the sense key shall 
be set to ABORTED COMMAND. 

e If multiple errors occur, the selection of which error to report is not defined by this standard. 
f See the Extended INQUIRY Data VPD page (see SPC-4) for the definitions of the grd_chk bit, the 
app_chk bit, and the ref_chk bits. 

9 If the device server detects a: 

a) logical block application tag field set to FFFFh and type 1 protection (see 4.17.2.3) is enabled; 
or 

b) LOGICAL BLOCK APPLICATION TAG field Set to FFFFh, LOGICAL BLOCK REFERENCE TAG field Set to 
FFFF_FFFFh, and type 3 protection (see 4.17.2.5) is enabled, 

then the device server shall not check any protection information in the associated logical block. 
h If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 3 protection is 
enabled, then the device server checks the logical block reference tag if it has knowledge of the 
contents of the logical block reference tag field. The method for acquiring this knowledge is not 
defined by this standard. 


The device server shall check the protection information transferred from the data-out buffer based on the 
orprotect field as described in table 31. 


Table 31 — orprotect field - checking protection information from the data-out buffer (part 1 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 

Device 

server 

check 

If check fails d e , additional sense code 

000b 

Yes 

No protection information received from application client to check 

No 

No protection information received from application client to check 

001b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 

LOGICAL BLOCK 

REFERENCE TAG 

Shall (except 
for type 3) f 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

No 

Error condition a 
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Table 31 — orprotect field - checking protection information from the data-out buffer (part 2 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 

Device 

server 

check 

If check fails d e , additional sense code 

010b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall not 

No check performed 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 

LOGICAL BLOCK 

REFERENCE TAG 

May f 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

No 

Error condition a 

011b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall not 

No check performed 

LOGICAL BLOCK 

APPLICATION TAG 

Shall not 

No check performed 

LOGICAL BLOCK 

REFERENCE TAG 

Shall not 

No check performed 

No 

Error condition a 

100b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

LOGICAL BLOCK 

APPLICATION TAG 

Shall not 

No check performed 

LOGICAL BLOCK 

REFERENCE TAG 

Shall not 

No check performed 

No 

Error condition a 

101b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 

LOGICAL BLOCK 

REFERENCE TAG 

May f 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

No 

Error condition a 

110b 

to 

111b 

Reserved 
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Table 31 — orprotect field - checking protection information from the data-out buffer (part 3 of 3) 



Logical unit 





formatted 

Field in 

Device 

If check fails d e , additional sense code 

Code 

with 

protection 

server 


protection 

information 

information 

check 



a An or write operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK CONDITION 
status with the sense key set to ILLEGAL REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
requested command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST 
and the additional sense code set to INVALID FIELD IN CDB. 
c The device server may check the logical block application tag if the ato bit is set to one in the Control 
mode page (see SPC-4) and if the device server has knowledge of the contents of the logical block 
application tag field. This knowledge is obtained by a method not defined by this standard. 
d If the device server terminates the command with CHECK CONDITION status, the sense key shall be 
set to ABORTED COMMAND. 

e If multiple errors occur, the selection of which error to report is not defined by this standard. 
f If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 3 protection is 
enabled, the ato bit is set to one in the Control mode page (see SPC-4), and the device server has 
knowledge of the contents of the logical block reference tag, then the device server may check the 
logical block reference tag. The method for acquiring this knowledge is not defined by this standard. 


5.4 PRE-FETCH (10) command 

The PRE-FETCH (10) command (see table 32) requests that the device server transfer the specified logical 
blocks from the medium to the volatile cache and/or non-volatile cache. Logical blocks include user data and, 
if the medium is formatted with protection information enabled, protection information. No data shall be 
transferred to the data-in buffer. 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 32. 


Table 32 — PRE-FETCH (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (34h) 

1 

Reserved immed Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

5 

(LSB) 

6 

Reserved group number 

7 

(MSB) 

PREFETCH LENGTH 

8 

. (LSB) 

9 

CONTROL 


An immediate (immed) bit set to zero specifies that status shall be returned after the operation is complete. An 
immed bit set to one specifies that status shall be returned as soon as the CDB has been validated. 

The logical block address field specifies the LBA of the first logical block (see 4.4) accessed by this 
command. If the specified LBA exceeds the capacity of the medium, then the device server shall terminate the 
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command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional 
sense code set to LOGICAL BLOCK ADDRESS OUT OF RANGE. 

The group number field specifies the group into which attributes associated with the command should be 
collected (see 4.18). A group number field set to zero specifies that any attributes associated with the 
command shall not be collected into any group. 

The prefetch length field specifies the number of contiguous logical blocks that shall be pre-fetched (i.e., 
transferred to the cache from the medium), starting with the logical block specified by the logical block 
address field. A prefetch length field set to zero specifies that all logical blocks starting with the one 
specified in the logical block address field to the last logical block on the medium shall be pre-fetched. Any 
other value specifies the number of logical blocks that shall be pre-fetched. If the LBA plus the prefetch length 
exceeds the capacity of the medium, then the device server shall terminate the command with CHECK 
CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set to 
LOGICAL BLOCK ADDRESS OUT OF RANGE. The device server is not required to transfer logical blocks 
that already are contained in the cache. 

The contents of the control byte are defined in SAM-4. 

If the immed bit is set to zero and the specified logical blocks were successfully transferred to the cache, then 
the device server shall complete the command with CONDITION MET status. 

If the immed bit is set to zero and the cache does not have sufficient capacity to accept all of the specified 
logical blocks, then the device server shall transfer to the cache as many of the specified logical blocks that fit. 
If these logical blocks are transferred successfully, then the device server shall complete the command with 
GOOD status. 

If the immed bit is set to one and the cache has sufficient capacity to accept all of the specified logical blocks, 
then the device server shall complete the command with CONDITION MET status. 

If the immed bit is set to one and the cache does not have sufficient capacity to accept all of the specified 
logical blocks, then the device server shall complete the command with GOOD status. 

If the immed bit is set to zero and one or more of the specified logical blocks were not successfully transferred 
to the cache for reasons other than lack of cache capacity, then the device server shall terminate the 
command with CHECK CONDITION status with the sense key and the additional sense code set to the 
appropriate values. If the immed bit is set to one and one or more of the specified logical blocks were not 
successfully transferred to the cache for reasons other than lack of cache capacity, the device server shall 
report a deferred error (see SPC-4). 
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5.5 PRE-FETCH (16) command 

The PRE-FETCH (16) command (see table 33) requests that the device server transfer the specified logical 
blocks from the medium to the volatile cache and/or non-volatile cache. Logical blocks include user data and, 
if the medium is formatted with protection information enabled, protection information. No data shall be 
transferred to the data-in buffer. 


Table 33 — PRE-FETCH (16) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (90h) 

1 

Reserved immed Reserved 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

9 

(LSB) 

10 

(MSB) 

PREFETCH LENGTH 

13 

(LSB) 

14 

Reserved group number 

15 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 33. 

See the PRE-FETCH (10) command (see 5.4) for the definitions of the other fields in this command. 

5.6 PREVENT ALLOW MEDIUM REMOVAL command 

The PREVENT ALLOW MEDIUM REMOVAL command (see table 34) requests that the logical unit enable or 
disable the removal of the medium. If medium removal is prevented on any I T nexus that has access to the 
logical unit, then the logical unit shall not allow medium removal. 


Table 34 — PREVENT ALLOW MEDIUM REMOVAL command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (1Eh) 

1 

Reserved 

2 

Reserved 

3 

Reserved 

4 

Reserved prevent 

5 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 34. 
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Table 35 defines the prevent field values and their meanings. 

Table 35 — prevent field 


Value 

Description 

00b 

Medium removal shall be allowed. 

01b 

Medium removal shall be prohibited. 

10b to 11b 

Obsolete 


The contents of the control byte are defined in SAM-4. 

The prevention of medium removal shall begin when any application client issues a PREVENT ALLOW 
MEDIUM REMOVAL command with the prevent field set to 01b (i.e., medium removal prevented). The 
prevention of medium removal for the logical unit shall terminate after: 

a) one of the following occurs for each l_T nexus through which medium removal had been prevented: 

A) receipt of a PREVENT ALLOW MEDIUM REMOVAL command with the prevent field set to 00b; 
or 

B) an l_T nexus loss; 

b) a power on; 

c) a hard reset; or 

d) a logical unit reset. 

If possible, the device server shall perform a synchronize cache operation before terminating the prevention of 
medium removal. 

If a persistent reservation or registration is being preempted by a PERSISTENT RESERVE OUT command 
with PREEMPT AND ABORT service action (see SPC-4), then the equivalent of a PREVENT ALLOW 
MEDIUM REMOVAL command with the prevent field set to zero shall be processed for each the I T nexuses 
associated with the persistent reservation or registrations being preempted. This allows an application client 
to override the prevention of medium removal function for an initiator port that is no longer operating correctly. 

While a prevention of medium removal condition is in effect, the logical unit shall inhibit mechanisms that allow 
removal of the medium by an operator. 

5.7 READ (6) command 

The READ (6) command (see table 36) requests that the device server read the specified logical block(s) and 
transfer them to the data-in buffer. Each logical block read includes user data and, if the medium is formatted 
with protection information enabled, protection information. Each logical block transferred includes user data 
but does not include protection information. The most recent data value written, or to be written, if cached, in 
the addressed logical blocks shall be returned. 

The operation code field is defined in SPC-4 and shall be set to the value defined in table 36. 


Table 36 — READ (6) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (08h) 

1 

Reserved (MSB) 

2 

LOGICAL BLOCK ADDRESS 

3 

(LSB) 

4 

transfer length 

5 

CONTROL 
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The cache control bits (see 5.8) are not provided for this command. Direct-access block devices with cache 
may have values for the cache control bits that affect the READ (6) command; however, no default values are 
defined by this standard. If explicit control is required, then the READ (10) command should be used. 

See the PRE-FETCH (10) command (see 5.4) for the definition of the logical block address field. 

The transfer length field specifies the number of contiguous logical blocks of data that shall be read and 
transferred to the data-in buffer, starting with the logical block specified by the logical block address field. A 
transfer length field set to zero specifies that 256 logical blocks shall be read. Any other value specifies the 
number of logical blocks that shall be read. If the LBA plus the transfer length exceeds the capacity of the 
medium, then the device server shall terminate the command with CHECK CONDITION status with the sense 
key set to ILLEGAL REQUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF 
RANGE. The transfer length field is constrained by the maximum transfer length field in the Block Limits 
VPD page (see 6.4.2). 

NOTE 9 - For the READ (10) command, READ (12) command, READ (16) command, and READ (32) 
command, a TRANSFER LENGTH field set to zero specifies that no logical blocks are read. 

NOTE 10 - Although the READ (6) command is limited to addressing logical blocks up to a capacity of 1 GiB, 
for logical block lengths of 512 bytes, this command has been maintained as mandatory since some system 
initialization routines require that the READ (6) command be used. System initialization routines should 
migrate from the READ (6) command to the READ (10) command, which is capable of addressing 2 TiB with 
logical block lengths of 512 bytes, or the READ (16) command to address more than 2 TiB. 

The contents of the control byte are defined in SAM-4. 
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The device server shall check the protection information read from the medium before returning status for the 
command as described in table 37. 


Table 37 — Protection information checking for READ (6) 


Logical unit 
formatted 
with 

protection 

information 

Shall device 

server 

transmit 

protection 

information? 

Field in 
protection 
information e 

Extended 
INQUIRY Data 
VPD page bit 
value d 

If check fails b c , additional 
sense code 



LOGICAL BLOCK 

GUARD 

GRD_CHK=1 

LOGICAL BLOCK GUARD 
CHECK FAILED 



GRD_CHK=0 

No check performed 

Yes 

No 

LOGICAL BLOCK 

APPLICATION TAG 

APP_CHK = 1 a 

LOGICAL BLOCK 

APPLICATION TAG CHECK 
FAILED 



APP_CHK=0 

No check performed 



LOGICAL BLOCK 

REFERENCE TAG 

REF_CHK=1 f 

LOGICAL BLOCK 

REFERENCE TAG CHECK 
FAILED 




REF_CHK=0 

No check performed 

No 


No protection information available to check 


a The device server checks the logical block application tag only if it has knowledge of the contents of the 
logical block application tag field. The method for acquiring this knowledge is not defined by this 
standard. 

b If the device server terminates the command with CHECK CONDITION status, then the sense key shall 
be set to ABORTED COMMAND. 

c If multiple errors occur, the selection of which error to report is not defined by this standard. 
d See the Extended INQUIRY Data VPD page (see SPC-4) for the definitions of the grd_chk bit, 
app_chk bit, and ref_chk bit. 
e If the device server detects a: 

a) LOGICAL BLOCK application tag field set to FFFFh and type 1 protection (see 4.17.2.3) or type 2 
protection (see 4.17.2.4) is enabled; or 

b) LOGICAL BLOCK APPLICATION TAG field Set to FFFFh, LOGICAL BLOCK REFERENCE TAG field Set to 
FFFF_FFFFh, and type 3 protection (see 4.17.2.5) is enabled, 

then the device server shall not check any protection information in the associated logical block. 
f If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 2 protection or 
type 3 protection is enabled, then the device server checks the logical block reference tag only if it has 
knowledge of the contents of the logical block reference tag field. The method for acquiring this 
knowledge is not defined by this standard. 
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5.8 READ (10) command 

The READ (10) command (see table 38) requests that the device server read the specified logical block(s) 
and transfer them to the data-in buffer. Each logical block read includes user data and, if the medium is 
formatted with protection information enabled, protection information. Each logical block transferred includes 
user data and may include protection information, based on the rdprotect field and the medium format. The 
most recent data value written in the addressed logical block shall be returned. 


Table 38 — READ (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (28h) 

1 

rdprotect dpo fua Reserved fua_nv Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

5 

(LSB) 

6 

Reserved group number 

7 

(MSB) 

TRANSFER LENGTH 

8 

(LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 38. 

See the PRE-FETCH (10) command (see 5.4) for the definition of the logical block address field. 

See the PRE-FETCH (10) command (see 5.4) and 4.18 for the definition of the group number field. 

The device server shall check the protection information read from the medium before returning status for the 
command based on the rdprotect field as described in table 39. 


Table 39 — rdprotect field (part 1 of 3) 


Code 

Logical 

unit 

formatted 

with 

protection 

information 

Shall device 

server 

transmit 

protection 

information? 

Field in 
protection 
information h 

Extended 
INQUIRY Data 
VPD page bit 
value 9 

If check fails d f , 
additional sense code 




LOGICAL BLOCK 

GUARD 

GRD_CHK = 1 

LOGICAL BLOCK 

GUARD CHECK FAILED 




GRD_CHK = 0 

No check performed 

000b 

Yes 

No 

LOGICAL BLOCK 

APPLICATION 

TAG 

APP_CHK = 1 c 

LOGICAL BLOCK 
APPLICATION TAG 

CHECK FAILED 


APP_CHK = 0 

No check performed 




LOGICAL BLOCK 

REFERENCE 

TAG 

REF_CHK=1 1 

LOGICAL BLOCK 
REFERENCE TAG 

CHECK FAILED 




REF_CHK = 0 

No check performed 


No 


No protection information available to check 
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Table 39 — rdprotect field (part 2 of 3) 


Code 

Logical 

unit 

formatted 

with 

protection 

information 

Shall device 

server 

transmit 

protection 

information? 

Field in 
protection 
information h 

Extended 
INQUIRY Data 
VPD page bit 
value 9 

If check fails d f , 
additional sense code 




LOGICAL BLOCK 

GUARD 

GRD_CHK = 1 

LOGICAL BLOCK 

GUARD CHECK FAILED 




GRD_CHK = 0 

No check performed 

001b 
101b b 

Yes 

Yes e 

LOGICAL BLOCK 

APPLICATION 

TAG 

APP_CHK= 1 c 

LOGICAL BLOCK 
APPLICATION TAG 

CHECK FAILED 



APP_CHK = 0 

No check performed 




LOGICAL BLOCK 

REFERENCE 

TAG 

REF_CHK= 1 ' 

LOGICAL BLOCK 
REFERENCE TAG 

CHECK FAILED 




REF_CHK = 0 

No check performed 


No a 

No protection information available to transmit to the data-in buffer or for 
checking 




LOGICAL BLOCK 

GUARD 

No check performed 


Yes 

Yes e 

LOGICAL BLOCK 

APPLICATION 

TAG 

APP_CHK =1 c 

LOGICAL BLOCK 
APPLICATION TAG 

CHECK FAILED 

010b b 

APP_CHK = 0 

No check performed 



LOGICAL BLOCK 

REFERENCE 

TAG 

REF_CHK =1 ' 

LOGICAL BLOCK 
REFERENCE TAG 

CHECK FAILED 




REF_CHK = 0 

No check performed 


No a 

No protection information available to transmit to the data-in buffer or for 
checking 




LOGICAL BLOCK 

GUARD 

No check performed 

011b b 

Yes 

Yes e 

LOGICAL BLOCK 

APPLICATION 

TAG 

No check performed 



LOGICAL BLOCK 

REFERENCE 

TAG 

No check performed 


No a 

No protection information available to transmit to the data-in buffer or for 
checking 
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Table 39 — rdprotect field (part 3 of 3) 


Code 

Logical 

unit 

formatted 

with 

protection 

information 

Shall device 

server 

transmit 

protection 

information? 

Field in 
protection 
information h 

Extended 
INQUIRY Data 
VPD page bit 
value 9 

If check fails d f , 
additional sense code 




LOGICAL BLOCK 

GUARD 

GRD_CHK = 1 

LOGICAL BLOCK 

GUARD CHECK FAILED 




GRD_CHK = 0 

No check performed 

100b b 

Yes 

Yes e 

LOGICAL BLOCK 

APPLICATION 

TAG 

No check performed 




LOGICAL BLOCK 

REFERENCE 

TAG 

No check performed 


No a 

No protection information available to transmit to the data-in buffer or for 
checking 

110b to 
111b 

Reserved 


a A read operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK 
CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set to 
INVALID FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the 
additional sense code set to INVALID FIELD IN CDB. 
c The device server shall check the logical block application tag if it has knowledge of the contents of the 
LOGICAL BLOCK application tag field. If the READ (32) command (see 5.11) is used, and the ato bit is 
set to one in the Control mode page (see SPC-4), then this knowledge is acquired from the expected 
logical BLOCK application tag field and the LOGICAL BLOCK APPLICATION TAG mask field in the CDB. 
Otherwise, this knowledge may be acquired by a method not defined by this standard. 
d If the device server terminates the command with CHECK CONDITION status, then the sense key 
shall be set to ABORTED COMMAND. 
e Transmit protection information to the data-in buffer. 

f If multiple errors occur, the selection of which error to report is not defined by this standard. 

9 See the Extended INQUIRY Data VPD page (see SPC-4) for the definitions of the grd_chk bit, the 
app_chk bit, and the ref_chk bit. 
h If the device server detects a: 

a) logical block application tag field set to FFFFh and type 1 protection (see 4.17.2.3) or type 2 
protection (see 4.17.2.4) is enabled; or 

b) LOGICAL BLOCK APPLICATION TAG field set to FFFFh, LOGICAL BLOCK REFERENCE TAG field set to 
FFFF_FFFFh, and type 3 protection (see 4.17.2.5) is enabled, 

then the device server shall not check any protection information in the associated logical block. 

1 If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 2 protection or 
type 3 protection is enabled, then the device server checks the logical block reference tag if it has 
knowledge of the contents of the logical block reference tag field. If type 2 protection is enabled, 
then this knowledge may be acquired through the expected initial logical block reference tag field 
in a READ (32) command (see 5.11). If type 3 protection is enabled, then the method for acquiring this 
knowledge is not defined by this standard. 
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A disable page out (dpo) bit set to zero specifies that the retention priority shall be determined by the 
retention priority fields in the Caching mode page (see 6.3.4). A dpo bit set to one specifies that the device 
server shall assign the logical blocks accessed by this command the lowest retention priority for being fetched 
into or retained by the cache. A dpo bit set to one overrides any retention priority specified in the Caching 
mode page. All other aspects of the algorithm implementing the cache replacement strategy are not defined 
by this standard. 

NOTE 11 - The DPO bit is used to control replacement of logical blocks in the cache when the application 
client has information on the future usage of the logical blocks. If the DPO bit is set to one, then the application 
client is specifying that the logical blocks accessed by the command are not likely to be accessed again in the 
near future and should not be put in the cache nor retained by the cache. If the DPO bit is set to zero, then the 
application client is specifying that the logical blocks accessed by this command are likely to be accessed 
again in the near future. 

The force unit access (fua) and force unit access non-volatile cache (fua_nv) bits are defined in table 40. 


Table 40 — Force unit access for read operations 


FUA 

FUA_NV 

Description 

0 

0 

The device server may read the logical blocks from volatile cache, non-volatile 
cache, and/or the medium. 

0 

1 

If the nv_sup bit is set to one in the Extended INQUIRY Data VPD page (see 
SPC-4), then the device server shall read the logical blocks from non-volatile 
cache or the medium. If a non-volatile cache is present and a volatile cache 
contains a more recent version of a logical block, then the device server shall 
write the logical block to: 

a) non-volatile cache; and/or 

b) the medium, 
before reading it. 



If the nv_sup bit is set to zero in the Extended INQUIRY Data VPD page (see 
SPC-4), then the device server may read the logical blocks from volatile cache, 
non-volatile cache, and/or the medium. 

1 

0 or 1 

The device server shall read the logical blocks from the medium. If a cache 
contains a more recent version of a logical block, then the device server shall 
write the logical block to the medium before reading it. 


The transfer length field specifies the number of contiguous logical blocks of data that shall be read and 
transferred to the data-in buffer, starting with the logical block specified by the logical block address field. A 
transfer length field set to zero specifies that no logical blocks shall be read. This condition shall not be 
considered an error. Any other value specifies the number of logical blocks that shall be read. If the LBA plus 
the transfer length exceeds the capacity of the medium, then the device server shall terminate the command 
with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code 
set to LOGICAL BLOCK ADDRESS OUT OF RANGE. The transfer length field is constrained by the 
maximum transfer length field in the Block Limits VPD page (see 6.4.2). 

NOTE 12 - For the READ (6) command, a TRANSFER LENGTH field set to zero specifies that 256 logical 

blocks are read. 

The contents of the control byte are defined in SAM-4. 
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5.9 READ (12) command 

The READ (12) command (see table 41) requests that the device server read the specified logical block(s) 
and transfer them to the data-in buffer. Each logical block read includes user data and, if the medium is 
formatted with protection information enabled, protection information. Each logical block transferred includes 
user data and may include protection information, based on the rdprotect field and the medium format. 


Table 41 — READ (12) command 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (A8h) 

1 

rdprotect dpo fua Reserved fua_nv Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 


5 


(LSB) 

6 

(MSB) 

TRANSFER LENGTH 


9 


(LSB) 

10 

Restricted 
for MMC-6 

Reserved 

GROUP NUMBER 

11 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 41. 

See the READ (10) command (see 5.8) for the definitions of the other fields in this command. 

5.10 READ (16) command 

The READ (16) command (see table 42) requests that the device server read the specified logical block(s) 
and transfer them to the data-in buffer. Each logical block read includes user data and, if the medium is 
formatted with protection information enabled, protection information. Each logical block transferred includes 
user data and may include protection information, based on the rdprotect field and the medium format. 


Table 42 — READ (16) command 


Bit 

Byte 

7 

6 5 

4 3 2 1 0 

0 

OPERATION CODE (88h) 

1 

rdprotect dpo fua Reserved fua_nv Reserved 

2 

(MSB) 


LOGICAL BLOCK ADDRESS 

9 


(LSB) 

10 

(MSB) 


TRANSFER LENGTH 

13 


(LSB) 

14 

Restricted 
for MMC-6 

Reserved 

GROUP NUMBER 

15 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 42. 
See the READ (10) command (see 5.8) for the definitions of the other fields in this command. 
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5.11 READ (32) command 

The READ (32) command (see table 43) requests that the device server read the specified logical block(s) 
and transfer them to the data-in buffer. Each logical block read includes user data and, if the medium is 
formatted with protection information enabled, protection information. Each logical block transferred includes 
user data and may include protection information, based on the rdprotect field and the medium format. 

The READ (32) command shall only be processed if type 2 protection is enabled (see 4.17.2.4). 


Table 43 — READ (32) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


5 


6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

9 

(LSB) 

10 

rdprotect dpo fua Reserved fua_nv Reserved 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 

19 

(LSB) 

20 

(MSB) 

EXPECTED INITIAL LOGICAL BLOCK REFERENCE TAG 

23 

" “. " .. (LSB) 

24 

(MSB) 

EXPECTED LOGICAL BLOCK APPLICATION TAG 

25 

‘. (LSB) 

26 

(MSB) 

LOGICAL BLOCK APPLICATION TAG MASK 

27 

. “ . (LSB) 

28 

(MSB) 

TRANSFER LENGTH 

31 

(LSB) 


The operation CODE field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 43. 

See the READ (10) command (see 5.8) for the definitions of the control byte, group number field, the 
rdprotect field, the dpo bit, the fua bit, the fua_nv bit, the logical block address field, and the transfer 
length field. 

When checking of the logical block reference tag field is enabled (see table 39 in 5.8), the expected 
INITIAL LOGICAL BLOCK REFERENCE TAG field contains the value of the LOGICAL BLOCK REFERENCE TAG field 
expected in the protection information of the first logical block accessed by the command instead of a value 
based on the LBA (see 4.17.3). 

If the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is enabled (see table 39 in 5.8), then the logical block application tag mask field 
contains a value that is a bit mask for enabling the checking of the logical block application tag field in the 
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protection information for each logical block accessed by the command. A logical block application tag 
mask field bit set to one enables the checking of the corresponding bit of the expected logical block 
application tag field with the corresponding bit of the logical block application tag field in the protection 
information. 

The LOGICAL BLOCK APPLICATION TAG MASK field and the EXPECTED LOGICAL BLOCK APPLICATION TAG field Shall 
be ignored if: 

a) the ato bit is set to zero; or 

b) the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is disabled (see table 39 in 5.8). 

5.12 READ CAPACITY (10) command 

5.12.1 READ CAPACITY (10) overview 

The READ CAPACITY (10) command (see table 44) requests that the device server transfer 8 bytes of 
parameter data describing the capacity and medium format of the direct-access block device to the data-in 
buffer. This command may be processed as if it has a HEAD OF QUEUE task attribute (see 4.12). If the 
logical unit supports protection information (see 4.17), then the application client should use the READ 
CAPACITY (16) command instead of the READ CAPACITY (10) command. 


Table 44 — READ CAPACITY (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (25h) 

1 

Reserved Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

5 

.. (LSB) 

6 

R0se rvGd 

7 


8 

Reserved pmi 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 44. 

See the PRE-FETCH (10) command (see 5.4) for the definition of the logical block address field. 

The logical block address field shall be set to zero if the pmi bit is set to zero. If the pmi bit is set to zero and 
the logical block address field is not set to zero, then the device server shall terminate the command with 
CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set 
to INVALID FIELD IN CDB. 

A partial medium indicator (pmi) bit set to zero specifies that the device server return information on the last 
logical block on the direct-access block device. 

A pmi bit set to one specifies that the device server return information on the last logical block after that 
specified in the logical block address field before a substantial vendor-specific delay in data transfer may 
be encountered. 

NOTE 13 - This function is intended to assist storage management software in determining whether there is 
sufficient space starting with the LB A specified in the CDB to contain a frequently accessed data structure 
(e.g., a file directory or file index) without incurring an extra delay. 

The contents of the control byte are defined in SAM-4. 
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5.12.2 READ CAPACITY (10) parameter data 

The READ CAPACITY (10) parameter data is defined in table 45. Any time the READ CAPACITY (10) 
parameter data changes, the device server should establish a unit attention condition as described in 4.7. 


Table 45 — READ CAPACITY (10) parameter data 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 

RETURNED LOGICAL BLOCK ADDRESS 


3 


(LSB) 

4 

(MSB) 

LOGICAL BLOCK LENGTH IN BYTES 


7 


(LSB) 


If the number of logical blocks exceeds the maximum value that is able to be specified in the returned 
logical block address field, then the device server shall set the returned logical block address field to 
FFFF_FFFFh. The application client should then issue a READ CAPACITY (16) command (see 5.13) to 
retrieve the READ CAPACITY (16) parameter data. 

If the pmi bit is set to zero, then the device server shall set the returned logical block address field to the 
lower of: 

a) the LBA of the last logical block on the direct-access block device; or 

b) FFFF_FFFFh. 

If the pmi bit is set to one, then the device server shall set the returned logical block address field to the 
lower of: 

a) the last LBA after that specified in the logical block address field of the CDB before a substantial 
vendor-specific delay in data transfer may be encountered; or 

b) FFFF_FFFFh. 

The returned logical block address shall be greater than or equal to that specified by the logical block 
address field in the CDB. 

The logical block length in bytes field contains the number of bytes of user data in the logical block 
indicated by the returned logical block address field. This value does not include protection information or 
additional information (e.g., ECC bytes) recorded on the medium. 
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5.13 READ CAPACITY (16) command 

5.13.1 READ CAPACITY (16) command overview 

The READ CAPACITY (16) command (see table 46) requests that the device server transfer parameter data 
describing the capacity and medium format of the direct-access block device to the data-in buffer. This 
command is mandatory if the logical unit supports protection information (see 4.17) and is optional otherwise. 
This command is implemented as a service action of the SERVICE ACTION IN operation code (see A.2). This 
command may be processed as if it has a HEAD OF QUEUE task attribute (see 4.12). 


Table 46 — READ CAPACITY (16) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (9Eh) 

1 

Reserved service action (1 Oh) 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

9 

(LSB) 

10 

(MSB) 

ALLOCATION LENGTH 

13 

' . (LSB) 

14 

Reserved pmi 

15 

CONTROL 


The operation code field and service action field are defined in SPC-4 and shall be set to the values 
defined in table 46. 

See the READ CAPACITY (10) command (see 5.12) for definitions of the logical block address field and 
the pmi bit. 

The allocation length field specifies the maximum number of bytes that the application client has allocated 
for returned parameter data. An allocation length of zero indicates that no data shall be transferred. This 
condition shall not be considered as an error. The device server shall terminate transfers to the data-in buffer 
when the number of bytes specified by the allocation length field have been transferred or when all 
available data has been transferred, whichever is less. The contents of the parameter data shall not be altered 
to reflect the truncation, if any, that results from an insufficient allocation length. 

The contents of the control byte are defined in SAM-4. 
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5.13.2 READ CAPACITY (16) parameter data 

The READ CAPACITY (16) parameter data is defined in table 47. Any time the READ CAPACITY (16) 
parameter data changes, the device server should establish a unit attention condition as described in 4.7. 


Table 47 — READ CAPACITY (16) parameter data 


Bit 

Byte 

7 6 5 4 

3 2 10 

0 

(MSB) 

7 

(LSB) 

8 

(MSB) 

11 

(LSB) 

12 

Reserved 

P_TYPE PROT_EN 

13 

Reserved 

LOGICAL BLOCKS PER PHYSICAL BLOCK EXPONENT 

14 

Reserved (MSB) 

15 

(LSB) 

16 


31 



The RETURNED LOGICAL BLOCK ADDRESS field and LOGICAL BLOCK LENGTH IN BYTES field of the READ 
CAPACITY (16) parameter data are the same as the in the READ CAPACITY (10) parameter data (see 5.12). 
The maximum value that shall be returned in the returned logical block address field is 
FFFF_FFFF_FFFF_FFFEh. 

The protection type (p_type) field and the protection enable (prot_en) bit (see table 48) indicate the logical 
unit’s current type of protection. 


Table 48 — p_type field and prot_en bit 


PROT_EN 

P_TYPE 

Description 

0 

xxxb 

The logical unit is formatted to type 0 protection (see 4.17.2.2). 

1 

000b 

The logical unit is formatted to type 1 protection (see 4.17.2.3). 

1 

001b 

The logical unit is formatted to type 2 protection (see 4.17.2.4). 

1 

010b 

The logical unit is formatted to type 3 protection (see 4.17.2.5). 

1 

011b to 111b 

Reserved 


The LOGICAL BLOCKS per physical block exponent field is defined in table 49. 


Table 49 — logical blocks per physical block exponent field 


Code 

Description 

0 

One or more physical blocks per logical block a 

n > 0 

2 n logical blocks per physical block 

a The number of physical blocks per logical block is not reported. 
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The lowest aligned logical block address field indicates the LBA of the first logical block that is located at 
the beginning of a physical block (see 4.5). 

NOTE 14 - The highest LBA that the lowest aligned logical block address field supports is 3FFFh (i.e., 16 
383). 

5.14 READ DEFECT DATA (10) command 

5.14.1 READ DEFECT DATA (10) command overview 

The READ DEFECT DATA (10) command (see table 50) requests that the device server transfer the medium 
defect data to the data-in buffer. 


Table 50 — READ DEFECT DATA (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (37h) 

1 

Reserved 

2 

Reserved req_plist req_glist defect list format 

3 

Reserved 

6 


7 

(MSB) 

ALLOCATION LENGTH 

8 

(LSB) 

9 

CONTROL 


If the device server is unable to access the medium defect data, then the device server shall terminate the 
command with CHECK CONDITION status. If a medium error occurred, then the device server shall set the 
sense key to MEDIUM ERROR, or, if there is no medium defect data, then the device server shall set the 
sense key to NO SENSE. The device server shall set the additional sense code to DEFECT LIST NOT 
FOUND. 

NOTE 15 - Some device servers may not be able to return medium defect data until after a FORMAT UNIT 
command (see 5.2) has been completed successfully. 

The operation code field is defined in SPC-4 and shall be set to the value defined in table 50. 

A request primary defect list (req_plist) bit set to zero specifies that the device server shall not return the 
PLIST. A req_plist bit set to one specifies that the device server shall return the PLIST, if any. 

A request grown defect list (req_glist) bit set to zero specifies that the device server shall not return the 
GUST. A req_glist bit set to one specifies that the device server shall return the GUST, if any. 

A req_plist bit set to zero and a req_glist bit set to zero specifies that the device server shall return only the 
defect list header (i.e., the first four bytes of the defect list). 

A req_plist bit set to one and a req_glist bit set to one specifies that the device server shall return both the 
PLIST and GLIST, if any. The order the lists are returned in is vendor-specific. Whether the lists are merged or 
not is vendor-specific. 

The defect list format field specifies the preferred format for the defect list. This field is intended for those 
device servers capable of returning more than one format, as defined in the FORMAT UNIT command (see 
5.2.2.4). A device server unable to return the requested format shall return the defect list in its default format 
and indicate that format in the defect list format field in the defect list header (see table 51). 


Working Draft SCSI Block Commands - 3 (SBC-3) 


81 









T10/1799-D Revision 16 


25 August 2008 


If the requested defect list format and the returned defect list format are not the same, then the device server 
shall transfer the defect data and then terminate the command with CHECK CONDITION status with the 
sense key set to RECOVERED ERROR and the additional sense code set to DEFECT LIST NOT FOUND. 

The ALLOCATION length field is defined in the READ CAPACITY (16) command (see 5.13). The application 
client is responsible for comparing the allocation length requested in the CDB with the defect list length 
returned in the parameter data to determine whether a partial list was received. If the number of address 
descriptors the device server has to report exceeds the maximum value that is able to be specified in the 
allocation length field, then the device server shall transfer no data and shall terminate the command with 
CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set 
to INVALID FIELD IN CDB. 

The contents of the control byte are defined in SAM-4. 

5.14.2 READ DEFECT DATA (10) parameter data 

The READ DEFECT DATA (10) parameter data (see table 51) contains a four-byte header, followed by zero or 
more address descriptors. 


Table 51 — READ DEFECT DATA (10) parameter data 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

Reserved 

1 

Reserved plistv glistv defect list format 

2 

(MSB) 

DEFECT LIST LENGTH (n - 3) 


3 


(LSB) 

Defect list (if any) 

4 


Address descriptor(s) (if any) 


n 




A PLIST valid (plistv) bit set to zero indicates that the data returned does not contain the PLIST. A plistv bit 
set to one indicates that the data returned contains the PLIST. 

A GLIST valid (glistv) bit set to zero indicates that the data returned does not contain the GLIST. A glistv bit 
set to one indicates that the data returned contains the GLIST. 

The defect list format field indicates the format of the address descriptors returned by the device server. 
This field is defined in the FORMAT UNIT command (see 5.2.2.4). 

If the device server returns short block format address descriptors (see 5.2.2.4.2) or long block format address 
descriptors (see 5.2.2.4.3), then the address descriptors contain vendor-specific values. 

NOTE 16 - The use of the short block format and the long block format is not recommended for this 
command. There is no standard model that defines the meaning of the block address of a defect. In the usual 
case, a defect that has been reassigned no longer has an LBA. 

If the device server returns physical sector format address descriptors (see 5.2.2.4.5), then the device server 
may or may not include defects in parts of the medium not accessible to the application client. If the device 
server returns bytes from index format address descriptors (see 5.2.2.4.4), then the device server shall return 
a complete list of the defects. A complete list of the defects may include defects in areas not within the 
capacity returned in the READ CAPACITY command. 

The defect list length field indicates the length in bytes of the address descriptors that follow. The defect 
list length is equal to four or eight times the number of the address descriptors, depending on the format of 
the returned address descriptors (see 5.2.2.4). 
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The address descriptors may or may not be sent in ascending order. 

5.15 READ DEFECT DATA (12) command 

5.15.1 READ DEFECT DATA (12) command overview 

The READ DEFECT DATA (12) command (see table 52) requests that the device server transfer the medium 
defect data to the data-in buffer. 


Table 52 — READ DEFECT DATA (12) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (B7h) 

1 

Reserved req_plist req_glist defect list format 

2 

f^Q5Q fVGd 

5 


6 

(MSB) 

ALLOCATION LENGTH 

9 

(LSB) 

10 

Reserved 

11 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 52. 

See the READ DEFECT DATA (10) command (see 5.14) for the definitions of the other fields in this command. 


NOTE 17 - The application client may determine the length of the defect list by sending the READ DEFECT 
DATA (12) command with an ALLOCATION LENGTH field set to eight. The device server returns the defect list 
header that contains the length of the defect list. 

5.15.2 READ DEFECT DATA (12) parameter data 

The READ DEFECT DATA (12) parameter data (see table 53) contains an eight byte header, followed by zero 
or more address descriptors. 


Table 53 — READ DEFECT DATA (12) parameter data 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

Reserved 

1 

Reserved plistv glistv defect list format 

2 

Reserved 

3 

Reserved 

4 

(MSB) 

DEFECT LIST LENGTH (n - 7) 

7 

(LSB) 

Defect list (if any) 

8 

Address descriptor(s) (if any) 

n 



See the READ DEFECT DATA (10) command (see 5.14) for the definitions of the fields in the defect list. 
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5.16 READ LONG (10) command 

The READ LONG (10) command (see table 54) requests that the device server transfer data from a single 
logical block or physical block to the data-in buffer. The data transferred during the READ LONG (10) 
command is vendor-specific, but shall include the following items recorded on the medium: 

a) if a logical block is being transferred, then: 

A) user data or transformed user data for the logical block; 

B) protection information or transformed protection information, if any, for the logical block; and 

C) any additional information (e.g., ECC bytes) for all the physical blocks in the logical block, 
or 

b) if a physical block is being transferred, then: 

A) user data or transformed user data for all the logical blocks in the physical block; 

B) protection information or transformed protection information, if any, for all the logical blocks in the 
physical block; and 

C) any additional information (e.g., ECC bytes);. 

If a cache contains a more recent version of the specified logical block or physical block, then the device 
server shall write the logical block or physical block to the medium before reading it. The values in the 
Read-Write Error Recovery mode page (see 6.3.5) do not apply to this command. The device server may 
perform retries while processing this command. 


Table 54 — READ LONG (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (3Eh) 

1 

Reserved pblock corrct Obsolete 

2 

(MSB) 

5 

(LSB) 

6 

Reserved 

7 

(MSB) 

BYTE TRANSFER LENGTH 

8 

(LSB) 

9 

CONTROL 


The logical block address field specifies an LBA (see 4.4). If the specified LBA exceeds the capacity of the 
medium, then the device server shall terminate the command with CHECK CONDITION status with the sense 
key set to ILLEGAL REQUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF 
RANGE. 

If the additional information contain an ECC, then any other additional bytes that are correctable by ECC 
should be included (e.g., a data synchronization mark within the area covered by ECC). It is not required for 
the ECC bytes to be at the end of the user data or protection information, if any. However, the ECC bytes 
should be in the same order as they are on the medium. 

If there is more than one logical block per physical block (i.e., the logical blocks per physical block 
exponent field in the READ CAPACITY (16) data (see 5.13.1) is set to a non-zero value), then: 

a) the device server shall support the physical block (pblock) bit; 

b) a pblock bit set to one specifies that the device server shall return the entire physical block containing 
the specified logical block; and 

c) a pblock bit set to zero specifies that the device server shall return bytes representing only the 
specified logical block. 

If there are one or more physical blocks per logical block (i.e., the logical blocks per physical block 
exponent field in the READ CAPACITY (16) data (see 5.13.1) is set to zero), and the pblock bit is set to one, 
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then the device server shall terminate the command with CHECK CONDITION status with the sense key set 
to ILLEGAL REQUEST and the additional sense code set to INVALID FIELD IN CDB. 

The operation code field is defined in SPC-4 and shall be set to the value defined in table 54. 

A correct (corrct) bit set to zero specifies that a logical block be read without any correction made by the 
device server. A corrct bit set to zero should result in the device server completing the command with 
GOOD status unless data is not transferred for some reason other than that the data is non-correctable. In this 
case the device server shall complete or terminate the command with the appropriate status and sense data. 
A corrct bit set to one specifies that the data be corrected by ECC before being transferred to the data-in 
buffer. 

The byte transfer length field specifies the number of bytes of data that shall be read from the specified 
logical block or physical block and transferred to the data-in buffer. If the byte transfer length field is not set 
to zero and does not match the available data length, then the device server shall terminate the command 
with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code 
set to INVALID FIELD IN CDB. In the sense data (see 4.14 and SPC-4), the valid and ili bits shall each be set 
to one and the information field shall be set to the difference (i.e., residue) of the requested byte transfer 
length minus the actual available data length in bytes. Negative values shall be indicated by two's 
complement notation. 

A byte transfer length field set to zero specifies that no bytes shall be read. This condition shall not be 
considered an error. 

The contents of the control byte are defined in SAM-4. 

5.17 READ LONG (16) command 

The READ LONG (16) command (see table 55) requests that the device server transfer data from a single 
logical block or physical block to the data-in buffer. The data transferred during the READ LONG (16) 
command is vendor-specific, but shall include the following items recorded on the medium: 

a) if a logical block is being transferred, then: 

A) user data or transformed user data for the logical block; 

B) protection information or transformed protection information, if any, for the logical block; and 

C) any additional information (e.g., ECC bytes) for all the physical blocks in the logical block, 
or 

b) if a physical block is being transferred, then: 

A) user data or transformed user data for all the logical blocks in the physical block; 

B) protection information or transformed protection information, if any, for all the logical blocks in the 
physical block; and 

C) any additional information (e.g., ECC bytes). 

If a cache contains a more recent version of the specified logical block or physical block, then the device 
server shall write the logical block or physical block to the medium before reading it. The values in the 
Read-Write Error Recovery mode page (see 6.3.5) do not apply to this command. The device server may 
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perform retries while processing this command. This command is implemented as a service action of the 
SERVICE ACTION IN operation code (see A.2). 


Table 55 — READ LONG (16) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (9Eh) 

1 

Reserved service action (11 h) 

2 

(MSB) 

9 

(LSB) 

10 

Reserved 

11 


12 

(MSB) 

BYTE TRANSFER LENGTH 

13 

(LSB) 

14 

Reserved pblock corrct 

15 

CONTROL 


The operation code field and service action field are defined in SPC-4 and shall be set to the value defined 
in table 55. 

See the READ LONG (10) command (see 5.16) for the definitions of the fields in this command. 

5.18 REASSIGN BLOCKS command 

5.18.1 REASSIGN BLOCKS command overview 

The REASSIGN BLOCKS command (see table 56) requests that the device server reassign defective logical 
blocks to another area on the medium set aside for this purpose. The device server should also record the 
location of the defective logical blocks in the GLIST, if supported. This command shall not alter the contents of 
the PLIST (see 4.9). 

The parameter list provided in the data-out buffer contains a defective LBA list that contains the LBAs of the 
logical blocks to be reassigned. The device server shall reassign the parts of the medium used for each logical 
block in the defective LBA list. More than one physical block may be relocated by each LBA. If the device 
server is able to recover user data and protection information, if any, from the original logical block, then the 
device server shall write the recovered user data and any protection information to the reassigned logical 
block. If the device server is unable to recover user data and protection information, if any, then the device 
server shall write vendor-specific data as the user data and shall write a default value of 
FFFF_FFFF_FFFF_FFFFh as the protection information, if enabled. The data in all other logical blocks on the 
medium shall be preserved. 

NOTE 18 - The effect of specifying a logical block to be reassigned that previously has been reassigned is to 
reassign the logical block again. Although not likely, over the life of the medium, a logical block may be 
assigned to multiple physical block addresses until no more spare locations remain on the medium. 


Working Draft SCSI Block Commands - 3 (SBC-3) 




25 August 2008 


T10/1799-D Revision 16 


Table 56 — REASSIGN BLOCKS command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (07h) 

1 

Reserved longlba longlist 

2 

Reserved 

4 


5 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 56. 

A long LBA (longlba) bit set to zero specifies that the REASSIGN BLOCKS defective LBA list contains four 
byte LB As. A longlba bit set to one specifies that the REASSIGN BLOCKS defective LBA list contains eight 
byte LBAs. 

The contents of the control byte are defined in SAM-4. 

5.18.2 REASSIGN BLOCKS parameter list 

The REASSIGN BLOCKS parameter list (see table 57) contains a four-byte parameter list header followed by 
a defective LBA list containing one or more LBAs. 


Table 57 — REASSIGN BLOCKS parameter list 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 


Parameter list header (see table 58 or table 59) 


3 



4 


DEFECTIVE LBA LIST (if any) 


n 




If longlist is set to zero, then the parameter list header is defined in table 58. 


Table 58 — REASSIGN BLOCKS short parameter list header 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 


Reserved 


1 



2 

(MSB) 

DEFECT LIST LENGTH 


3 


(LSB) 
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If longlist is set to one, then the parameter list header is defined in table 59. 


Table 59 — REASSIGN BLOCKS long parameter list header 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 

DEFECT LIST LENGTH 


3 


(LSB) 


The DEFECT LIST length field indicates the total length in bytes of the defective lba list field. The defect list 
length field does not include the parameter list header length and is equal to either: 

a) four times the number of LBAs, if the longlba bit is set to zero; or 

b) eight times the number of LBAs, if the longlba bit is set to one. 

The defective lba list field contains a list of defective LBAs. Each LBA is a four-byte field if the longlba bit is 
set to zero or an eight-byte field if the longlba bit is set to one. The LBAs shall be in ascending order. 

If the direct-access block device has insufficient capacity to reassign all of the specified logical blocks, then 
the device server shall terminate the command with CHECK CONDITION status with the sense key set to 
HARDWARE ERROR and the additional sense code set to NO DEFECT SPARE LOCATION AVAILABLE. 

If the direct-access block device is unable to successfully complete a REASSIGN BLOCKS command, then 
the device server shall terminate the command with CHECK CONDITION status with the appropriate sense 
data (see 4.14 and SPC-4). The first LBA not reassigned shall be returned in the command-specific 
information field of the sense data. If information about the first LBA not reassigned is not available, or if all 
the defects have been reassigned, then the command-specific information field shall be set to FFFF_FFFFh 
if fixed format sense data is being used or FFFF_FFFF_FFFF_FFFFh if descriptor format sense data is being 
used. 

If the REASSIGN BLOCKS command failed due to an unexpected unrecovered read error that would cause 
the loss of data in a logical block not specified in the defective LBA list, then the LBA of the logical block with 
the unrecovered read error shall be returned in the information field of the sense data and the valid bit shall 
be set to one. 

NOTE 19 - If the device server terminates the REASSIGN BLOCKS command with CHECK CONDITION 
status, and the sense data COMMAND-SPECIFIC INFORMATION field contains a valid LBA, then the application 
client should remove all LBAs from the defective LBA list prior to the one returned in the COMMAND-SPECIFIC 
INFORMATION field. If the sense key is set to MEDIUM ERROR, and the INFORMATION field contains the valid 
LBA, then the application client should insert that new defective LBA into the defective LBA list and reissue 
the REASSIGN BLOCKS command with the new defective LBA list. Otherwise, the application client should 
perform any corrective action indicated by the sense data and then reissue the REASSIGN BLOCKS 
command with the new defective LBA list. 
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5.19 START STOP UNIT command 

The START STOP UNIT command (see table 60) requests that the device server change the power condition 
of the logical unit (see 4.16) or load or eject the medium. This includes specifying that the device server 
enable or disable the direct-access block device for medium access operations by controlling power 
conditions and timers. 

If any deferred downloaded code has been received as a result of a WRITE BUFFER command (see SPC-4), 
then that deferred downloaded code shall replace the current operational code. 


Table 60 — START STOP UNIT command 


Bit 

Byte 

7 6 5 4 

3 2 10 

0 

OPERATION CODE (IBh) 

1 

Reserved immed 

2 

Reserved 

3 

Reserved 

POWER CONDITION MODIFIER 

4 

POWER CONDITION 

Reserved no_flush loej start 

5 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 60. 

If the immediate (immed) bit is set to zero, then the device server shall return status after the operation is 
completed. If the immed bit set to one, then the device server shall return status as soon as the CDB has been 
validated. 

The power condition modifier field defined in table 61 is used to specify additional information about the 
power condition specified in the power condition field. 


Table 61 — power condition modifier field 


POWER CONDITION 

field value 

Code 

Description 

All values that 
are not reserved 

Oh 

Reserved 

2h (i.e., IDLE) 

1h 

Specifies that the device server shall increase the tolerance of the direct 
access block device to external physical forces (e.g., causes a device that has 
movable read/write heads to move those heads to a safe position). 

2h 

Specifies that the device server shall increase the tolerance of the direct 
access block device to external physical forces (e.g., causes a device that has 
movable read/write heads to move those heads to a safe position) and should 
cause the device to use less power than when this field is set to 1h (e.g., 
cause a device that has rotating media to rotate the media at a lower RPM). 

All other combinations 

Reserved 
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The power condition field is used to specify that the logical unit be placed into a power condition or to adjust 
a timer as defined in table 62. If this field is supported and is set to a value other than Oh, then the start and 
loej bits shall be ignored. 


Table 62 — power condition field 


Code 

Name 

Description 

Oh 

START_VALID 

Process the start and loej bits. 

1h 

ACTIVE 

Place the device into the active power condition. 

2h 

IDLE 

Place the device into the idle power condition. 

3h 

STANDBY 

Place the device into the standby power condition. 

4h 

Reserved 

Reserved 

5h 

Obsolete 

Obsolete 

6h 

Reserved 

Reserved 

7h 

LU_CONTROL 

Transfer control of power conditions to the logical unit. 

8h to 9h 

Reserved 

Reserved 

Ah 

FORCE IDLE 0 

Force the idle condition timer to zero. 

Bh 

FORCE_STANDBY_0 

Force the standby condition timer to zero. 

Ch to Fh 

Reserved 

Reserved 


If the START STOP UNIT command is processed with the power condition field set to ACTIVE, IDLE, or 
STANDBY, then: 

a) the logical unit shall transition to the specified power condition; and 

b) the device server shall disable the idle condition timer if it is active (see SPC-4) and disable the 
standby condition timer if it is active (see SPC-4) until another START STOP UNIT command is 
processed that returns control of the power condition to the logical unit, or a logical unit reset occurs. 

If the START STOP UNIT command is processed with the power condition field set to LU_CONTROL, then 
the device server shall enable the idle condition timer if it is active (see SPC-4) and disable the standby 
condition timer if it is active (see SPC-4). 

If the START STOP UNIT command is processed with the power condition field set to FORCEJDLEO or 
FORCE_STANDBY_0, then the device server shall: 

a) force the specified timer to zero, cause the logical unit to transition to the specified power condition, 
and return control of the power condition to the device server; or 

b) terminate a START STOP UNIT command that selects a timer that is not supported by the device 
server or a timer that is not active. The device server shall terminate the command with CHECK 
CONDITION status with the sense key set to ILLEGAL REOUEST and the additional sense code set 
to INVALID FIELD IN CDB. 

It is not an error to specify that the logical unit transition to its current power condition. 

If the no_flush bit is set to zero, then logical units that contain cache shall write all cached logical blocks to 
the medium (e.g., as they would do in response to a SYNCHRONIZE CACHE command (see 5.20 and 5.21) 
with the sync_nv bit set to zero, the logical block address field set to zero, and the number of logical 
blocks field set to zero) prior to entering into any power condition that prevents accessing the medium (e.g., 
before the rotating media spindle motor is stopped during transition to the stopped power condition). If the 
no_flush bit is set to one, then cached logical blocks should not be written to the medium by the logical unit 
prior to entering into any power condition that prevents accessing the medium. 
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If the load eject (loej) bit is set to zero, then the logical unit shall take no action regarding loading or ejecting 
the medium. If the loej bit is set to one, then the logical unit shall unload the medium if the start bit is set to 
zero. If the loej bit is set to one, then the logical unit shall load the medium if the start bit is set to one. 

If the start bit is set to zero, then the logical unit shall: 

a) transition to the stopped power condition; 

b) disable the idle condition timer if it is active (see SPC-4); and 

c) disable the standby condition timer if it is active (see SPC-4). 

If the start bit set to one, then the logical unit shall: 

a) transition to the active power condition; 

b) enable the idle condition timer if it is active; and 

c) enable the standby condition timer if it is active. 

The contents of the control byte are defined in SAM-4. 

5.20 SYNCHRONIZE CACHE (10) command 

The SYNCHRONIZE CACHE (10) command (see table 63) requests that the device server ensure that the 
specified logical blocks have their most recent data values recorded in non-volatile cache and/or on the 
medium, based on the sync_nv bit. Logical blocks include user data and, if the medium is formatted with 
protection information enabled, protection information. Logical blocks may or may not be removed from 
volatile cache and non-volatile cache as a result of the synchronize cache operation. 


Table 63 — SYNCHRONIZE CACHE (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (35h) 

1 

Reserved sync_nv immed Obsolete 

2 

(MSB) 

5 

(LSB) 

6 

Reserved group number 

7 

(MSB) 

NUMBER OF LOGICAL BLOCKS 

8 

(LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 63. 

See the PRE-FETCH (10) command (see 5.4) for the definition of the logical block address field. 
See the PRE-FETCH (10) command (see 5.4) and 4.18 for the definition of the group number field. 
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The sync_nv bit (see table 64) specifies whether the device server is required to synchronize volatile and 
non-volatile caches. 


Table 64 — sync_nv bit 


Code 

Device server requirement to synchronize logical blocks currently in the 

Volatile cache 

Non-volatile cache 

0 

Device server shall synchronize to the medium. 

Device server shall synchronize to the 
medium. 

1 

If a non-volatile cache is present, then the device 
server shall synchronize to non-volatile cache or the 
medium. If a non-volatile cache is not present, then 
the device server shall synchronize to the medium. 

No requirement. 


An immediate (immed) bit set to zero specifies that the device server shall not return status until the operation 
has been completed. An immed bit set to one specifies that the device server shall return status as soon as the 
CDB has been validated. If the immed bit is set to one, and the device server does not support the immed bit, 
then the device server shall terminate the command with CHECK CONDITION status with the sense key set 
to ILLEGAL REQUEST and the additional sense code set to INVALID FIELD IN CDB. 

The number of logical blocks field specifies the number of logical blocks that shall be synchronized, 
starting with the logical block specified by the logical block address field. A number of logical blocks field 
set to zero specifies that all logical blocks starting with the one specified in the logical block address field to 
the last logical block on the medium shall be synchronized. If the LBA plus the number of logical blocks 
exceeds the capacity of the medium, then the device server shall terminate the command with CHECK 
CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set to 
LOGICAL BLOCK ADDRESS OUT OF RANGE. 

A logical block within the range that is not in cache is not considered an error. 

The contents of the control byte are defined in SAM-4. 

5.21 SYNCHRONIZE CACHE (16) command 

The SYNCHRONIZE CACHE (16) command (see table 65) requests that the device server ensure that the 
specified logical blocks have their most recent data values recorded in non-volatile cache and/or on the 
medium, based on the sync_nv bit. Logical blocks include user data and, if the medium is formatted with 
protection information enabled, protection information. Logical blocks may or may not be removed from 
volatile cache and non-volatile cache as a result of the synchronize cache operation. 


Table 65 — SYNCHRONIZE CACHE (16) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (91 h) 

1 

Reserved sync_nv immed Reserved 

2 

(MSB) 

9 

(LSB) 

10 

(MSB) 

NUMBER OF LOGICAL BLOCKS 

13 

. “. (LSB) 

14 

Reserved group number 

15 

CONTROL 
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The operation code field is defined in SPC-4 and shall be set to the value defined in table 65. 

See the SYNCHRONIZE CACHE (10) command (see 5.20) for the definitions of the other fields in this 
command. 

5.22 VERIFY (10) command 

The VERIFY (10) command (see table 66) requests that the device server verify the specified logical block(s) 
on the medium. Each logical block includes user data and may include protection information, based on the 
vrprotect field and the medium format. 


Table 66 — VERIFY (10) command 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (2Fh) 

1 


VRPROTECT 


DPO 

Reserved 

BYTCHK 

Obsolete 

2 

(MSB) 







5 








(LSB) 

6 

Restricted 
for MMC-6 

Reserved 

GROUP NUMBER 

7 

(MSB) 







8 








(LSB) 

9 

CONTROL 


Logical units that contain cache shall write referenced cached logical blocks to the medium for the logical unit 
(e.g., as they would do in response to a SYNCHRONIZE CACHE command (see 5.20 and 5.21) with the 
sync_nv bit set to zero, the logical block address field set to the value of the VERIFY command’s logical 
block address field, and the number of blocks field set to the value of the VERIFY command’s verification 
length field). 

The operation code field is defined in SPC-4 and shall be set to the value defined in table 66. 

See the READ (10) command (see 5.8) for the definition of the dpo bit. See the PRE-FETCH (10) command 
(see 5.4) for the definition of the logical block address field. See the PRE-FETCH (10) command (see 5.4) 
and 4.18 for the definition of the group number field. 

If the Verify Error Recovery mode page (see 6.3.6) is implemented, then the current settings in that page 
specify the verification criteria. If the Verify Error Recovery mode page is not implemented, then the 
verification criteria is vendor-specific. 

If the byte check (bytchk) bit is set to zero, then the device server shall: 

a) perform a medium verification with no data comparison and not transfer any data from the data-out 
buffer; and 

b) check protection information read from the medium based on the vrprotect field as described in 
table 67. 

If the bytchk bit is set to one, then the device server shall: 

a) perform a byte-by-byte comparison of user data read from the medium and user data transferred from 
the data-out buffer; 

b) check protection information read from the medium based on the vrprotect field as described in 
table 68; 

c) check protection information transferred from the data-out buffer based on the vrprotect field as 
described in table 69; and 
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d) perform a byte-by-byte comparison of protection information read from the medium and transferred 
from the data-out buffer based on the vrprotect field as described in table 70. 

The order of the user data and protection information checks and comparisons is vendor-specific. 

If a byte-by-byte comparison is unsuccessful for any reason, then the device server shall terminate the 
command with CHECK CONDITION status with the sense key set to MISCOMPARE and the additional sense 
code set to the appropriate value for the condition. 

The verification length field specifies the number of contiguous logical blocks that shall be verified, starting 
with the logical block specified by the logical block address field. If the bytchk bit is set to one, then the 
verification length field also specifies the number of logical blocks that the device server shall transfer from 
the data-out buffer. A verification length field set to zero specifies that no logical blocks shall be verified. 
This condition shall not be considered as an error. Any other value specifies the number of logical blocks that 
shall be verified. If the LBA plus the verification length exceeds the capacity of the medium, then the device 
server shall terminate the command with CHECK CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF RANGE. The 
verification length field is constrained by the maximum transfer length field in the Block Limits VPD page 
(see 6.4.2). 

The contents of the control byte are defined in SAM-4. 

If the bytchk bit is set to zero, then the device server shall check the protection information read from the 
medium based on the vrprotect field as described in table 67. 


Table 67 — vrprotect field with bytchk set to zero - checking protection information read from the 
medium (part 1 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 9 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 

000b 

Yes 

LOGICAL 

BLOCK GUARD 

GRD_CHK=1 

LOGICAL BLOCK GUARD CHECK FAILED 

GRD_CHK=0 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

APP_CHK= 1 c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 

APP_CHK=0 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

REF_CHK = 1 h 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

REF_CHK=0 

No check performed 

No 

No protection information on the medium to check. Only user data is checked. 

001b 
101b b 

Yes 

LOGICAL 

BLOCK GUARD 

GRD_CHK=1 

LOGICAL BLOCK GUARD CHECK FAILED 

GRD_CHK=0 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

APP_CHK = 1 c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 

APP_CHK=0 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

REF_CHK = 1 h 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

REF_CHK=0 

No check performed 

No 

Error condition a 
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Table 67 — vrprotect field with bytchk set to zero - checking protection information read from the 
medium (part 2 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 9 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 

010b b 

Yes 

LOGICAL 

BLOCK GUARD 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

APP_CHK= 1 c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 

APP_CHK=0 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

REF_CHK = 1 h 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

REF_CHK=0 

No check performed 

No 

Error condition a 

011b b 

Yes 

LOGICAL 

BLOCK GUARD 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

No check performed 

No 

Error condition a 

100b b 

Yes 

LOGICAL 

BLOCK GUARD 

GRD_CHK=1 

LOGICAL BLOCK GUARD CHECK FAILED 

GRD_CHK=0 

No check performed 

LOGICAL 

BLOCK 

APPLICATION 

TAG 

No check performed 

LOGICAL 

BLOCK 

REFERENCE 

TAG 

No check performed 

No 

Error condition a 

110b 

to 

111b 

Reserved 
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Table 67 — vrprotect field with bytchk set to zero - checking protection information read from the 
medium (part 3 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 9 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 


a A verify operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK CONDITION 
status with the sense key set to ILLEGAL REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
requested command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST 
and the additional sense code set to INVALID FIELD IN CDB. 
c The device server shall check the logical block application tag if it has knowledge of the contents of the 
LOGICAL BLOCK application tag field. If the VERIFY (32) command (see 5.25) is used, and the ato bit is 
set to one in the Control mode page (see SPC-4), then this knowledge is acquired from the expected 
logical block application tag field and the logical block application tag mask field in the CDB. 
Otherwise, this knowledge may be obtained by a method not defined by this standard. 
d If the device server terminates the command with CHECK CONDITION status, then the sense key shall 
be set to ABORTED COMMAND. 

e If multiple errors occur, then the selection of which error to report is not defined by this standard. 
f See the Extended INQUIRY Data VPD page (see SPC-4) for the definitions of the grd_chk bit, the 
app_chk bit, and the ref_chk bits. 

9 If the device server detects a: 

a) logical block application tag field set to FFFFh and type 1 protection (see 4.17.2.3) or type 2 
protection (see 4.17.2.4) is enabled; or 

b) LOGICAL BLOCK APPLICATION TAG field Set to FFFFh, LOGICAL BLOCK REFERENCE TAG field Set to 
FFFF_FFFFh, and type 3 protection (see 4.17.2.5) is enabled, 

then the device server shall not check any protection information in the associated logical block. 
h If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 2 protection or type 
3 protection is enabled, then the device server checks the logical block reference tag if it has knowledge 
of the contents of the logical block reference tag field. If type 2 protection is enabled, then this 
knowledge may be acquired through the expected initial logical block reference tag field in a 
VERIFY (32) command (see 5.25). If type 3 protection is enabled, then the method for acquiring this 
knowledge is not defined by this standard. 
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If the bytchk bit is set to one, then the device server shall check the protection information read from the 
medium based on the vrprotect field as described in table 68. 


Table 68 — vrprotect field with bytchk set to one - checking protection information read from the 
medium (part 1 of 2) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 9 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 

000b 

Yes 

LOGICAL BLOCK 

GUARD 

GRD_CHK = 1 

LOGICAL BLOCK GUARD CHECK 

FAILED 

GRD_CHK = 0 

No check performed 

LOGICAL BLOCK 

APPLICATION TAG 

APP_CHK = 1 c 9 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 

APP_CHK = 0 

No check performed 

LOGICAL BLOCK 

REFERENCE TAG 

REF_CHK = 1 h 

LOGICAL BLOCK REFERENCE TAG 
CHECK FAILED 

REF_CHK = 0 

No check performed 

No 

No protection information on the medium available to check 

001b 
010b 
011b 
100b 
101b b 

Yes 

LOGICAL BLOCK 

GUARD 

No check performed 

LOGICAL BLOCK 

APPLICATION TAG 

No check performed 

LOGICAL BLOCK 

REFERENCE TAG 

No check performed 

No 

Error condition a 

110b 

to 

111b 

Reserved 
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Table 68 — vrprotect field with bytchk set to one - checking protection information read from the 
medium (part 2 of 2) 


Code 

Logical unit 
formatted 
with 

Field in 
protection 

Extended 
INQUIRY Data 
VPD page bit 
value f 

If check fails d e , additional sense code 


protection 

information 

information 9 



a A verify operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK CONDITION 
status with the sense key set to ILLEGAL REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
requested command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST 
and the additional sense code set to INVALID FIELD IN CDB. 
c The device server shall check the logical block application tag if it has knowledge of the contents of the 
logical block application tag field. If the VERIFY (32) command (see 5.25) is used, and the ato bit is 
set to one in the Control mode page (see SPC-4), then this knowledge is acquired from the expected 
LOGICAL BLOCK APPLICATION TAG field and the LOGICAL BLOCK APPLICATION TAG MASK field in the CDB. 
Otherwise, this knowledge may be obtained by a method not defined by this standard. 
d If the device server terminates the command with CHECK CONDITION status, then the sense key shall 
be set to ABORTED COMMAND. 

e If multiple errors occur, then the selection of which error to report is not defined by this standard. 
f See the Extended INQUIRY Data VPD page (see SPC-4) for the definitions of the grd chk bit, the 
app_chk bit, and the ref_chk bit. 

9 If the device server detects a: 

a) logical block application tag field set to FFFFh and type 1 protection (see 4.17.2.3) or type 2 
protection (see 4.17.2.4) is enabled; or 

b) LOGICAL BLOCK APPLICATION TAG field Set to FFFFh, LOGICAL BLOCK REFERENCE TAG field Set to 
FFFF_FFFFh, and type 3 protection (see 4.17.2.5) is enabled, 

then the device server shall not check any protection information in the associated logical block. 
h If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 2 protection or type 
3 protection is enabled, then the device server checks the logical block reference tag if it has knowledge 
of the contents of the logical block reference tag field. If type 2 protection is enabled, then this 
knowledge may be acquired through the expected initial logical block reference tag field in a 
VERIFY (32) command (see 5.25). If type 3 protection is enabled, then the method for acquiring this 
knowledge is not defined by this standard. 
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If the bytchk bit is set to one, then the device server shall check the protection information transferred from 
the data-out buffer based on the vrprotect field as described in table 69. 


Table 69 — vrprotect field with bytchk set to one - checking protection information from the data-out 
buffer (part 1 of 2) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 

Device 

server 

check 

If check fails d e , additional sense code 

000b 

Yes 

No protection information received from application client to check 

No 

No protection information received from application client to check 

001b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 

LOGICAL BLOCK 

REFERENCE TAG 

Shall (except 
for type 3) f 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

No 

Error condition a 

010b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall not 

No check performed 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 

LOGICAL BLOCK 

REFERENCE TAG 

May f 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 

No 

Error condition a 

011b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall not 

No check performed 

LOGICAL BLOCK 

APPLICATION TAG 

Shall not 

No check performed 

LOGICAL BLOCK 

REFERENCE TAG 

Shall not 

No check performed 

No 

Error condition a 

100b b 

Yes 

LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

LOGICAL BLOCK 

APPLICATION TAG 

Shall not 

No check performed 

LOGICAL BLOCK 

REFERENCE TAG 

Shall not 

No check performed 

No 

Error condition a 
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Table 69 — vrprotect field with bytchk set to one - checking protection information from the data-out 
buffer (part 2 of 2) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 

Device 

server 

check 

If check fails d e , additional sense code 



LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

101b b 

Yes 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

May f 

LOGICAL BLOCK REFERENCE TAG 

CHECK FAILED 


No 

Error condition a 

110b 

to 

111b 

Reserved 


a A verify operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK CONDITION 
status with the sense key set to ILLEGAL REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
requested command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST 
and the additional sense code set to INVALID FIELD IN CDB. 
c The device server may check the logical block application tag if the ato bit is set to one in the Control 
mode page (see SPC-4) and if the device server has knowledge of the contents of the logical block 
application TAG field. If the VERIFY (32) command (see 5.25) is used, then this knowledge is obtained 
from the expected logical block application tag field and the logical block application tag mask 
field in the CDB. Otherwise, this knowledge is obtained by a method not defined by this standard. 
d If the device server terminates the command with CHECK CONDITION status, then the device server 
shall set the sense key to ABORTED COMMAND. 
e If multiple errors occur, the selection of which error to report is not defined by this standard. 
f If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 2 protection is 
enabled, and the device server has knowledge of the contents of the logical block reference tag 
field, then the device server checks the logical block reference tag. If type 2 protection is enabled, then 
this knowledge may be acquired through the expected initial logical block reference tag field in a 
VERIFY (32) command (see 5.25). If type 3 protection is enabled, the ato bit is set to one in the Control 
mode page (see SPC-4), and the device server has knowledge of the contents of the logical block 
reference tag field, then the device server may check the logical block reference tag. If type 3 
protection is enabled, then the method for acquiring this knowledge is not defined by this standard. 
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If the bytchk bit is set to one, then the device server shall perform a byte-by-byte comparison of protection 
information transferred from the data-out buffer with protection information read from the medium based on 
the vrprotect field as described in table 70. 


Table 70 — vrprotect field with bytchk set to one - byte-by-byte comparison requirements (part 1 of 2) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field 

Byte-by-byte 

Comparison 

If compare fails c d , additional sense 
code 

000b 

Yes 

No protection information received from application client to compare. Only user 
data is compared within each logical block. 

No 

No protection information or the medium or received from application client to 
compare. Only user data is compared within each logical block. 



LOGICAL BLOCK GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK 
FAILED 



LOGICAL BLOCK 

APPLICATION TAG 

(ato = 1 ) e 

Shall 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 



LOGICAL BLOCK 

APPLICATION TAG 
(ATO = 0) f 

Shall not 

No compare performed 

001b b 

Yes 

LOGICAL BLOCK 

REFERENCE TAG 

(not type 3) 

Shall 

LOGICAL BLOCK REFERENCE TAG 
CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

(type 3 and ato = 0) 

Shall 

LOGICAL BLOCK REFERENCE TAG 
CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

(type 3 and ato = 1 ) 

Shall not 

No compare performed 


No 

Error condition a 



LOGICAL BLOCK GUARD 

Shall not 

No compare performed 



LOGICAL BLOCK 

APPLICATION TAG 
(ATO = 1 ) e 

Shall 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 



LOGICAL BLOCK 

APPLICATION TAG 
(ATO = 0) f 

Shall not 

No compare performed 

010b b 

Yes 

LOGICAL BLOCK 

REFERENCE TAG 

(not type 3) 

Shall 

LOGICAL BLOCK REFERENCE TAG 
CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

(type 3 and ato = 0) 

Shall 

LOGICAL BLOCK REFERENCE TAG 
CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

(type 3 and ato = 1 ) 

Shall not 

No compare performed 


No 

Error condition a 
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Table 70 — vrprotect field with bytchk set to one - byte-by-byte comparison requirements (part 2 of 2) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field 

Byte-by-byte 

Comparison 

If compare fails c d , additional sense 
code 



LOGICAL BLOCK GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK 
FAILED 



LOGICAL BLOCK 

APPLICATION TAG 
(ATO = 1 ) e 

Shall 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 



LOGICAL BLOCK 

APPLICATION TAG 
(ATO = 0) f 

Shall not 

No compare performed 

011b 
100b b 

Yes 

LOGICAL BLOCK 

REFERENCE TAG 

(not type 3) 

Shall 

LOGICAL BLOCK REFERENCE TAG 
CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

(type 3 and ato = 0) 

Shall 

LOGICAL BLOCK REFERENCE TAG 
CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

(type 3 and ato = 1 ) 

Shall not 

No compare performed 


No 

Error condition a 



LOGICAL BLOCK GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK 
FAILED 


Yes 

LOGICAL BLOCK 

APPLICATION TAG 
(ATO = 1 ) e 

Shall 

LOGICAL BLOCK APPLICATION TAG 
CHECK FAILED 

101b b 

LOGICAL BLOCK 

APPLICATION TAG 
(ATO = 0) f 

Shall not 

No compare performed 



LOGICAL BLOCK 

REFERENCE TAG 

Shall not 

No compare performed 


No 

Error condition a 

110b to 
111b 

Reserved 


a A verify operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK CONDITION 
status with the sense key set to ILLEGAL REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
requested command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST 
and the additional sense code set to INVALID FIELD IN CDB. 
c If the device server terminates the command with CHECK CONDITION status, then the sense key shall 
be set to MISCOMPARE. 

d If multiple errors occur, the selection of which error to report is not defined by this standard. 
e If the ato bit is set to one in the Control mode page (see SPC-4), then the logical block application tag 
shall not be modified by a device server. 

f If the ato bit is set to zero in the Control mode page (see SPC-4), then the logical block application tag 
may be modified by a device server. 
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5.23 VERIFY (12) command 

The VERIFY (12) command (see table 71) requests that the device server verify the specified logical block(s) 
on the medium. Each logical block includes user data and may include protection information, based on the 
vrprotect field and the medium format. 


Table 71 — VERIFY (12) command 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (AFh) 

1 

vrprotect dpo Reserved bytchk Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 


5 


(LSB) 

6 

(MSB) 

VERIFICATION LENGTH 


9 


(LSB) 

10 

Restricted 
for MMC-6 

Reserved 

GROUP NUMBER 

11 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 71. 

See the VERIFY (10) command (see 5.22) for the definitions of the other fields in this command. 

5.24 VERIFY (16) command 

The VERIFY (16) command (see table 72) requests that the device server verify the specified logical block(s) 
on the medium. Each logical block includes user data and may include protection information, based on the 
vrprotect field and the medium format. 


Table 72 — VERIFY (16) command 


Bit 

Byte 

7 

6 5 

4 3 2 1 0 

0 

OPERATION CODE (8Fh) 

1 

vrprotect dpo Reserved bytchk Reserved 

2 

(MSB) 


LOGICAL BLOCK ADDRESS 

9 


. (LSB) 

10 

(MSB) 


VERIFICATION LENGTH 

13 


(LSB) 

14 

Restricted 
for MMC-6 

Reserved 

GROUP NUMBER 

15 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 72. 
See the VERIFY (10) command (see 5.22) for the definitions of the other fields in this command. 
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5.25 VERIFY (32) command 

The VERIFY (32) command (see table 73) requests that the device server verify the specified logical block(s) 
on the medium. Each logical block includes user data and may include protection information, based on the 
vrprotect field and the medium format. 

The VERIFY (32) command shall only be processed if type 2 protection is enabled (see 4.17.2.4). 


Table 73 — VERIFY (32) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


5 


6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

9 

(LSB) 

10 

vrprotect DPO Reserved bytchk Reserved 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 

19 

(LSB) 

20 

(MSB) 

EXPECTED INITIAL LOGICAL BLOCK REFERENCE TAG 

23 

..”. (LSB) 

24 

(MSB) 

EXPECTED LOGICAL BLOCK APPLICATION TAG 

25 

(LSB) 

26 

(MSB) 

LOGICAL BLOCK APPLICATION TAG MASK 

27 

.... (LSB) 

28 

(MSB) 

VERIFICATION LENGTH 

31 

.."" (LSB) 


The operation CODE field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 73. 

See the VERIFY (10) command (see 5.22) for the definitions of the control byte, group number field, 
VRPROTECT field, DPO bit, BYTCHK bit, LOGICAL BLOCK ADDRESS field, and VERIFICATION LENGTH field. 

When checking of the logical block reference tag field is enabled (see table 67, table 68, table 69, and 
table 70 in 5.22), the expected initial logical block reference tag field contains the value of the logical 
block reference tag field expected in the protection information of the first logical block accessed by the 
command instead of a value based on the LBA (see 4.17.3). 

If the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is enabled (see table 67, table 68, table 69, and table 70 in 5.22), then the logical 
block application tag mask field contains a value that is a bit mask for enabling the checking of the logical 
block application tag field in the protection information for each logical block accessed by the command. A 
logical block application tag mask bit set to one enables the checking of the corresponding bit of the 
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expected logical block application tag field with the corresponding bit of the logical block application 
tag field in the protection information. 

The LOGICAL BLOCK APPLICATION TAG MASK field and the EXPECTED LOGICAL BLOCK APPLICATION TAG field Shall 
be ignored if: 

a) the ato bit is set to zero; or 

b) the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is disabled (see table 67, table 68, table 69, and table 70 in 5.22). 

5.26 WRITE (6) command 

The WRITE (6) command (see table 74) requests that the device server transfer the specified logical block(s) 
from the data-out buffer and write them. Each logical block transferred includes user data but does not include 
protection information. Each logical block written includes user data and, if the medium is formatted with 
protection information enabled, protection information. 


Table 74 — WRITE (6) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (OAh) 

1 

Reserved (MSB) 

2 

LOGICAL BLOCK ADDRESS 

3 

.... (LSB) 

4 

TRANSFER LENGTH 

5 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 74. 

The cache control bits are not provided for this command. Direct-access block devices with cache may have 
values for the cache control bits that may affect the WRITE (6) command, however no default value is defined 
by this standard. If explicit control is required, then the WRITE (10) command should be used. 

See the PRE-FETCH (10) command (see 5.4) for the definition of the logical block address field. 

The transfer length field specifies the number of contiguous logical blocks of data that shall be transferred 
from the data-out buffer and written, starting with the logical block specified by the logical block address 
field. A transfer length field set to zero specifies that 256 logical blocks shall be written. Any other value 
specifies the number of logical blocks that shall be written. If the LBA plus the transfer length exceeds the 
capacity of the medium, then the device server shall terminate the command with CHECK CONDITION status 
with the sense key set to ILLEGAL REQUEST and the additional sense code set to LOGICAL BLOCK 
ADDRESS OUT OF RANGE. The transfer length field is constrained by the maximum transfer length 
field in the Block Limits VPD page (see 6.4.2). 

NOTE 20 - For the WRITE (10) command, WRITE (12) command, WRITE (16) command, and WRITE (32) 
command, a TRANSFER LENGTH field set to zero specifies that no logical blocks are transferred. 

The contents of the control byte are defined in SAM-4. 

If a WRITE (6) command is received after protection information is enabled, then the device server shall set 
the protection information (see 4.17) as follows as the device server writes each logical block to the medium: 

a) the logical block guard field set to a properly generated CRC (see 4.17.4); 

b) the LOGICAL BLOCK REFERENCE TAG field Set to: 

A) the least significant four bytes of the LBA, if type 1 protection (see 4.17.2.3) is enabled; 

B) FFFF_FFFFh, if type 2 protection is enabled (see 4.17.2.4); 
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C) FFFF_FFFFh, if the ato bit is set to one in the Control mode page (see SPC-4), and type 3 
protection (see 4.17.2.5) is enabled; or 

D) any value, if the ato bit is set to zero in the Control mode page (see SPC-4), and type 3 protection 
(see 4.17.2.5) is enabled; 

and 

c) the LOGICAL BLOCK APPLICATION TAG field Set to: 

A) FFFFh, if the ato bit is set to one in the Control mode page (see SPC-4); or 

B) any value, if the ato bit is set to zero in the Control mode page (see SPC-4). 

5.27 WRITE (10) command 

The WRITE (10) command (see table 75) requests that the device server transfer the specified logical 
block(s) from the data-out buffer and write them. Each logical block transferred includes user data and may 
include protection information, based on the wrprotect field and the medium format. Each logical block 
written includes user data and, if the medium is formatted with protection information enabled, protection 
information. 


Table 75 — WRITE (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (2Ah) 

1 

wrprotect DPO fua Reserved fua_nv Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

5 

.. (LSB) 

6 

Reserved group number 

7 

(MSB) 

TRANSFER LENGTH 

8 

(LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 75. 

See the READ (10) command (see 5.8) for the definition of the dpo bit. See the PRE-FETCH (10) command 
(see 5.4) for the definition of the logical block address field. See the PRE-FETCH (10) command (see 5.4) 
and 4.1 8 for the definition of the group number field. 

The contents of the control byte are defined in SAM-4. 

The device server shall check the protection information transferred from the data-out buffer based on the 
wrprotect field as described in table 76. 


Table 76 — wrprotect field (part 1 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 

Device 

server 

check 

If check fails d additional sense code 

000b 

Yes f 9 h 

No protection information received from application client to check 

No 

No protection information received from application client to check 
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Table 76 — wrprotect field (part 2 of 3) 


Code 

Logical unit 
formatted 
with 

protection 

information 

Field in 
protection 
information 

Device 

server 

check 

If check fails d additional sense code 



LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

001b b 

Yes e 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

Shall (except 
for type 3) J 

LOGICAL BLOCK REFERENCE TAG CHECK 
FAILED 


No a 

No protection information available to check 



LOGICAL BLOCK 

GUARD 

Shall not 

No check performed 

010b b 

Yes e 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

May 1 

LOGICAL BLOCK REFERENCE TAG CHECK 
FAILED 


No a 

No protection information available to check 



LOGICAL BLOCK 

GUARD 

Shall not 

No check performed 

011b b 

Yes e 

LOGICAL BLOCK 

APPLICATION TAG 

Shall not 

No check performed 



LOGICAL BLOCK 

REFERENCE TAG 

Shall not 

No check performed 


No a 

No protection information available to check 



LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

100b b 

Yes e 

LOGICAL BLOCK 

APPLICATION TAG 

Shall not 

No check performed 



LOGICAL BLOCK 

REFERENCE TAG 

Shall not 

No check performed 


No a 

No protection information available to check 



LOGICAL BLOCK 

GUARD 

Shall 

LOGICAL BLOCK GUARD CHECK FAILED 

101b b 

Yes e 

LOGICAL BLOCK 

APPLICATION TAG 

May c 

LOGICAL BLOCK APPLICATION TAG 

CHECK FAILED 



LOGICAL BLOCK 

REFERENCE TAG 

May j 

LOGICAL BLOCK REFERENCE TAG CHECK 
FAILED 


No a 

No protection information available to check 

110b 

to 

111b 

Reserved 


Working Draft SCSI Block Commands - 3 (SBC-3) 


107 







T10/1799-D Revision 16 


25 August 2008 


Table 76 — wrprotect field (part 3 of 3) 



Logical unit 
formatted 

Field in 

Device 


Code 

with 

protection 

information 

protection 

information 

server 

check 

If check fails d additional sense code 


a A write operation to a logical unit that supports protection information (see 4.17) and has not been 
formatted with protection information shall be terminated by the device server with CHECK 
CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set to 
INVALID FIELD IN CDB. 

b If the logical unit does not support protection information, then the device server should terminate the 
requested command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST 
and the additional sense code set to INVALID FIELD IN CDB. 

c The device server may check the logical block application tag if the ato bit is set to one in the Control 
mode page (see SPC-4) and if it has knowledge of the contents of the logical block application tag 
field. If the WRITE (32) command (see 5.30) is used, then this knowledge is obtained from the 
EXPECTED LOGICAL BLOCK APPLICATION TAG field and the LOGICAL BLOCK APPLICATION TAG MASK field in 
the CDB. Otherwise, this knowledge is obtained by a method not defined by this standard. 

d If the device server terminates the command with CHECK CONDITION status, then the sense key shall 
be set to ABORTED COMMAND. 

e Device server shall preserve the contents of protection information (e.g., write to medium, store in 
non-volatile memory). 

f The device server shall write a properly generated CRC (see 4.17.4.2) into each logical block guard 
field. 

9 If the p_type field is set to OOOh in the READ CAPACITY (16) parameter data (see 5.13), then the 
device server shall write the least significant four bytes of each LBA into the logical block reference 
tag field of each of the written logical blocks. If the p_type field is not set to 000b, then the device 
server shall write a value of FFFF_FFFFh into the logical block reference tag field of each of the 
written logical blocks. 

h If the ato bit is set to one in the Control mode page (see SPC-4), then the device server shall write 
FFFFh into each logical block application tag field. If the ato bit is set to zero, then the device 
server may write any value into each logical block application tag field. 

' If multiple errors occur, the selection of which error to report is not defined by this standard. 

1 If type 1 protection is enabled, then the device server checks the logical block reference tag by 
comparing it to the lower 4 bytes of the LBA associated with the logical block. If type 2 protection is 
enabled, and the device server has knowledge of the contents of the logical block reference tag 
field, then the device server checks the logical block reference tag. If type 2 protection is enabled, then 
this knowledge may be acquired through the expected initial logical block reference tag field in a 
WRITE (32) command (see 5.30). If type 3 protection is enabled, the ato bit is set to one in the Control 
mode page (see SPC-4), and the device server has knowledge of the contents of the logical block 
reference tag field, then the device server may check the logical block reference tag. If type 3 
protection is enabled, then the method for acquiring this knowledge is not defined by this standard. 


108 


Working Draft SCSI Block Commands - 3 (SBC-3) 





25 August 2008 


T10/1799-D Revision 16 


The force unit access (fua) and force unit access non-volatile cache (fua_nv) bits are defined in table 77. 


Table 77 — Force unit access for write operations 


FUA 

FUA_NV 

Description 

0 

0 

The device server shall write the logical blocks to volatile cache, non-volatile cache, 
and/or the medium. 

0 

1 

If the nv_sup bit is set to one in the Extended INQUIRY Data VPD page (see SPC-4), 
then the device server shall write the logical blocks to non-volatile cache and/or the 
medium. 

If the nv_sup bit is set to zero in the Extended INQUIRY Data VPD page (see SPC-4), 
then the device server shall write the logical blocks to volatile cache, non-volatile cache, 
and/or the medium. 

1 

0 or 1 

The device server shall write the logical blocks to the medium, and shall not complete 
the command with GOOD status until the logical blocks have been written on the 
medium without error. 


If logical blocks are transferred directly to a cache, then the device server may complete the command with 
GOOD status prior to writing the logical blocks to the medium. Any error that occurs after the device server 
has completed the command with GOOD status is returned as a deferred error, and information regarding the 
error is not reported until a subsequent command. 

The transfer length field specifies the number of contiguous logical blocks of data that shall be transferred 
from the data-out buffer and written, starting with the logical block specified by the logical block address 
field. A transfer length field set to zero specifies that no logical blocks shall be written. This condition shall 
not be considered an error. Any other value specifies the number of logical blocks that shall be written. If the 
LBA plus the transfer length exceeds the capacity of the medium, then the device server shall terminate the 
command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional 
sense code set to LOGICAL BLOCK ADDRESS OUT OF RANGE. The transfer length field is constrained 
by the maximum transfer length field in the Block Limits VPD page (see 6.4.2). 

NOTE 21 - For the WRITE (6) command, a TRANSFER LENGTH field set to zero specifies that 256 logical 

blocks are transferred. 
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5.28 WRITE (12) command 

The WRITE (12) command (see table 78) requests that the device server transfer the specified logical 
block(s) from the data-out buffer and write them. Each logical block transferred includes user data and may 
include protection information, based on the wrprotect field and the medium format. Each logical block 
written includes user data and, if the medium is formatted with protection information enabled, protection 
information. 


Table 78 — WRITE (12) command 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (AAh) 

1 

wrprotect dpo fua Reserved fua_nv Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 


5 


(LSB) 

6 

(MSB) 

TRANSFER LENGTH 


9 


(LSB) 

10 

Restricted 

for 

MMC-6 

Reserved 

GROUP NUMBER 

11 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 78. 

See the WRITE (10) command (see 5.27) for the definitions of the other fields in this command. 

5.29 WRITE (16) command 

The WRITE (16) command (see table 79) requests that the device server transfer the specified logical 
block(s) from the data-out buffer and write them. Each logical block transferred includes user data and may 
include protection information, based on the wrprotect field and the medium format. Each logical block 
written includes user data and, if the medium is formatted with protection information enabled, protection 
information. 


Table 79 — WRITE (16) command 


Bit 

Byte 

7 

6 5 

4 3 2 1 0 

0 

OPERATION CODE (8Ah) 

1 

wrprotect dpo fua Reserved fua_nv Reserved 

2 

(MSB) 


LOGICAL BLOCK ADDRESS 

9 


.. (LSB) 

10 

(MSB) 


TRANSFER LENGTH 

13 


(LSB) 

14 

Restricted 

for 

MMC-6 

Reserved 

GROUP NUMBER 

15 

CONTROL 
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The operation code field is defined in SPC-4 and shall be set to the value defined in table 79. 

See the WRITE (10) command (see 5.27) for the definitions of the other fields in this command. 

5.30 WRITE (32) command 

The WRITE (32) command (see table 80) requests that the device server transfer the specified logical 
block(s) from the data-out buffer and write them. Each logical block transferred includes user data and may 
include protection information, based on the wrprotect field and the medium format. Each logical block 
written includes user data and, if the medium is formatted with protection information enabled, protection 
information. 

The WRITE (32) command shall only be processed if type 2 protection is enabled (see 4.17.2.4). 


Table 80 — WRITE (32) command 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


Reserved 


5 



6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

SERVICE action (000Bh) 


9 


(LSB) 

10 

wrprotect dpo fua Reserved fua_nv Reserved 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 


19 


(LSB) 

20 

(MSB) 

EXPECTED INITIAL LOGICAL BLOCK REFERENCE TAG 


23 


(LSB) 

24 

(MSB) 

EXPECTED LOGICAL BLOCK APPLICATION TAG 


25 


(LSB) 

26 

(MSB) 

LOGICAL BLOCK APPLICATION TAG MASK 


27 


(LSB) 

28 

(MSB) 

TRANSFER LENGTH 


31 


(LSB) 


The operation code field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 80. 

See the WRITE (10) command (see 5.27) for the definitions of the control byte, group number field, the 
wrprotect field, the dpo bit, the fua bit, the fua_nv bit, the logical block address field, and the transfer 
length field. 

When checking of the logical block reference tag field is enabled (see table 76 in 5.27), the expected 
INITIAL LOGICAL BLOCK REFERENCE TAG field contains the value of the LOGICAL BLOCK REFERENCE TAG field 
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expected in the protection information of the first logical block accessed by the command instead of a value 
based on the LBA (see 4.17.3). 

If the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application TAG field is enabled (see table 76 in 5.27), then the logical block application tag mask field 
contains a value that is a bit mask for enabling the checking of the logical block application tag field in the 
protection information for each logical block accessed by the command. A logical block application tag 
mask bit set to one enables the checking of the corresponding bit of the expected logical block application 
tag field with the corresponding bit of the logical block application tag field in the protection information. 

The LOGICAL BLOCK APPLICATION TAG MASK field and the EXPECTED LOGICAL BLOCK APPLICATION TAG field Shall 
be ignored if: 

a) the ato bit is set to zero; or 

b) the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is disabled (see table 76 in 5.27). 

5.31 WRITE AND VERIFY (10) command 

The WRITE AND VERIFY (10) command (see table 81) requests that the device server transfer the specified 
logical block(s) from the data-out buffer, write them to the medium, and then verify that they are correctly 
written. Each logical block includes user data and may include protection information, based on the 
wrprotect field and the medium format. The logical blocks are only transferred once from the data-out buffer 
to the device server. 


Table 81 — WRITE AND VERIFY (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (2Eh) 

1 

wrprotect dpo Reserved bytchk Obsolete 

2 

(MSB) 

5 

(LSB) 

6 

Reserved group number 

7 

(MSB) 

TRANSFER LENGTH 

8 

” . (LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 81. 

See the PRE-FETCH (10) command (see 5.4) for the definition of the logical block address field. See the 
PRE-FETCH (10) command (see 5.4) and 4.18 for the definition of the group number field. See the WRITE 
(10) command (see 5.27) for the definitions of the control byte, transfer length field and the wrprotect 
field. See the READ (10) command (see 5.8) for the definition of the dpo bit. 

If the Verify Error Recovery mode page (see 6.3.6) is also implemented, then the current settings in that mode 
page along with the awre bit in the Read-Write Error Recovery mode page (see 6.3.5) specify the verification 
error criteria. If these mode pages are not implemented, then the verification criteria is vendor-specific. 

A byte check (bytchk) bit set to zero specifies that, after writing, the device server perform a medium 
verification with no data comparison. A bytchk bit set to one specifies that, after writing, the device server 
perform a byte-by-byte comparison of data written on the medium with the data just written. If the comparison 
is unsuccessful for any reason, then the device server shall terminate the command with CHECK CONDITION 
status with the sense key set to MISCOMPARE and the additional sense code set to the appropriate value for 
the condition. 
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5.32 WRITE AND VERIFY (12) command 

The WRITE AND VERIFY (12) command (see table 82) requests that the device server transfer the specified 
logical block(s) from the data-out buffer, write them to the medium, and then verify that they are correctly 
written. Each logical block includes user data and may include protection information, based on the 
wrprotect field and the medium format. The logical blocks are only transferred once from the data-out buffer 
to the device server. 


Table 82 — WRITE AND VERIFY (12) command 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (AEh) 

1 

wrprotect dpo Reserved bytchk Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 


5 


(LSB) 

6 

(MSB) 

TRANSFER LENGTH 


9 


(LSB) 

10 

Restricted 

for 

MMC-6 

Reserved 

GROUP NUMBER 

11 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 82. 

See the WRITE AND VERIFY (10) command (see 5.31) for the definitions of the other fields in this command. 

5.33 WRITE AND VERIFY (16) command 

The WRITE AND VERIFY (16) command (see table 83) requests that the device server transfer the specified 
logical block(s) from the data-out buffer, write them to the medium, and then verify that they are correctly 
written. Each logical block includes user data and may include protection information, based on the 
wrprotect field and the medium format. The logical blocks are only transferred once from the data-out buffer 
to the device server. 


Table 83 — WRITE AND VERIFY (16) command 


Bit 

Byte 

7 

6 5 

4 3 2 1 0 

0 

OPERATION CODE (8Eh) 

1 

wrprotect dpo Reserved bytchk Reserved 

2 

(MSB) 


LOGICAL BLOCK ADDRESS 

9 


.. (LSB) 

10 

(MSB) 


TRANSFER LENGTH 

13 


(LSB) 

14 

Restricted 

for 

MMC-6 

Reserved 

GROUP NUMBER 

15 

CONTROL 
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The operation code field is defined in SPC-4 and shall be set to the value defined in table 83. 

See the WRITE AND VERIFY (10) command (see 5.31) for the definitions of the other fields in this command. 

5.34 WRITE AND VERIFY (32) command 

The WRITE AND VERIFY (32) command (see table 84) requests that the device server transfer the specified 
logical block(s) from the data-out buffer, write them to the medium, and then verify that they are correctly 
written. Each logical block includes user data and may include protection information, based on the 
wrprotect field and the medium format. The logical blocks are only transferred once from the data-out buffer 
to the device server. 


Table 84 — WRITE AND VERIFY (32) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


5 


6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

9 

(LSB) 

10 

wrprotect DPO Reserved bytchk Reserved 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 

19 

(LSB) 

20 

(MSB) 

EXPECTED INITIAL LOGICAL BLOCK REFERENCE TAG 

23 

.. . (LSB) 

24 

(MSB) 

EXPECTED LOGICAL BLOCK APPLICATION TAG 

25 

(LSB) 

26 

(MSB) 

LOGICAL BLOCK APPLICATION TAG MASK 

27 

...(LSB) 

28 

(MSB) 

TRANSFER LENGTFI 

31 

(LSB) 


The operation CODE field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 84. 

See the WRITE AND VERIFY (10) command (see 5.31) for the definitions of the control byte, group 
number field, the wrprotect field, the dpo bit, the bytchk bit, the logical block address field, and the 

TRANSFER LENGTH field. 

When checking of the logical block reference tag field is enabled (see table 76 in 5.27), the expected 
INITIAL LOGICAL BLOCK REFERENCE TAG field contains the value of the LOGICAL BLOCK REFERENCE TAG field 
expected in the protection information of the first logical block accessed by the command instead of a value 
based on the LBA (see 4.17.3). 
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If the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is enabled (see table 76 in 5.27), then the logical block application tag mask field 
contains a value that is a bit mask for enabling the checking of the logical block application tag field in the 
protection information for each logical block accessed by the command. A logical block application tag 
mask bit set to one enables the checking of the corresponding bit of the expected logical block application 
tag field with the corresponding bit of the logical block application tag field in the protection information. 

If the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is disabled (see table 76 in 5.27), or if the ato bit is set to zero, then the logical block 
application TAG mask field and the expected logical block application tag field shall be ignored. 

5.35 WRITE LONG (10) command 

The WRITE LONG (10) command (see table 85) requests that the device server mark a logical block or 
physical block as containing an error, or transfer data for a single logical block or physical block from the 
data-out buffer and write it to the medium. The data written shall be the same length and shall be in the same 
order as the data returned by the READ LONG (10) command (see 5.16). The device server shall write the 
logical block or physical block to the medium, and shall not complete the command with GOOD status until the 
logical block has been written on the medium without error. 


Table 85 — WRITE LONG (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (3Fh) 

1 

cor_dis | wr_uncor | pblock Reserved Obsolete 

2 

(MSB) 

5 

(LSB) 

6 

Reserved 

7 

(MSB) 

BYTE TRANSFER LENGTH 

8 

.. (LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 85. 
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The correction disabled (cor_dis) bit, the write uncorrectable error (wr_uncor) bit, and the physical block 
(pblock) bit are defined in table 86. If there is more than one logical block per physical block (i.e., the logical 
blocks per physical block exponent field in the READ CAPACITY (16) data (see 5.13.1) is set to a 
non-zero value), then the device server shall support the wr_uncor bit and the pblock bit. 


Table 86 — cor_dis bit, wr_uncor bit, and pblock bit (part 1 of 2) 


COR_DIS 

WR_UNCOR 

PBLOCK 

More than 
one logical 
block per 
physical 
block a 

Description 



0 

yes or no 

Write only the specified logical block using the value in the 

BYTE TRANSFER LENGTH field. 

0 

0 

1 

no 

Complete the WRITE LONG command with CHECK 
CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 




yes 

Write the entire physical block containing the specified 
logical block using the value in the byte transfer length 
field. 



0 

yes or no 

Mark only the specified logical block as containing a 
pseudo unrecovered error with correction enabled (see 
4.14.2) in a manner that causes the device server to 
perform the maximum error recovery as defined by the 
Read-Write Error Recovery mode page (see 6.3.5). 





Ignore the byte transfer length field, and transfer no 
data. 

0 

1 


no 

Complete the WRITE LONG command with CHECK 
CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 



1 

yes 

Mark the entire physical block containing the specified 
logical block as containing a pseudo unrecovered error 
with correction enabled (i.e., mark all of the logical blocks 
in the same physical block that contains the specified 
logical block as containing a pseudo unrecovered error 
with correction enabled) (see 4.14.2). 





Ignore the byte transfer length field, and transfer no 
data. 

a An entry of “yes” means that the logical blocks per physical block exponent field in the READ 
CAPACITY (16) data (see 5.13.1) is set to a non-zero value. An entry of “no” means that the field is set 
to zero. 
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Table 86 — cor_dis bit, wr_uncor bit, and pblock bit (part 2 of 2) 


COR_DIS 

WR_UNCOR 

PBLOCK 

More than 
one logical 
block per 
physical 
block a 

Description 



0 

yes or no 

Mark only the specified logical block as containing a 
pseudo unrecovered error with correction disabled (see 
4.14.2) 

Write only the specified logical block using the value in the 

BYTE TRANSFER LENGTH field. 

1 

0 


no 

Complete the WRITE LONG command with CHECK 
CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 



1 

yes 

Mark the entire physical block containing the specified 
logical block as containing a pseudo unrecovered error 
with correction disabled (i.e., mark all of the logical blocks 
in the same physical block that contains the specified 
logical block as containing a pseudo unrecovered error 
with correction disabled) (see 4.14.2). 





Write the entire physical block containing the specified 
logical block using the value in the byte transfer length 
field. 



0 

yes or no 

Mark only the specified logical block as containing a 
pseudo unrecovered error with correction disabled (see 
4.14.2). 

Ignore the byte transfer length field, and transfer no 
data. 

1 

1 


no 

Complete the WRITE LONG command with CHECK 
CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to INVALID 
FIELD IN CDB. 



1 

yes 

Mark the entire physical block containing the specified 
logical block as containing a pseudo unrecovered error 
with correction disabled (i.e., mark all of the logical blocks 
in the same physical block that contains the specified 
logical block as containing a pseudo unrecovered error 
with correction disabled) (see 4.14.2). 





Ignore the byte transfer length field, and transfer no 
data. 


a An entry of “yes” means that the logical blocks per physical block exponent field in the READ 
CAPACITY (16) data (see 5.13.1) is set to a non-zero value. An entry of “no” means that the field is set 
to zero. 


Any pseudo unrecovered error with correction disabled shall remain in effect until the logical block is written 
by any means (e.g., another WRITE LONG command with the cor_dis bit set to zero and the wr_uncor bit 
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set to zero that writes to the same logical block, any WRITE command that specifies the writes to the same 
logical block, ora FORMAT UNIT command). 

In the Extended INQUIRY Data VPD page (see SPC-4), the setting of the cd_sup bit indicates whether or not 
the logical unit supports the cd_sup bit being set to one, and the setting of the wu_sup bit indicates whether or 
not the logical unit supports the wfmjncor bit being set to one. 

The logical block address field specifies an LBA. If the specified LBA exceeds the capacity of the medium, 
then the device server shall terminate the command with CHECK CONDITION status with the sense key set 
to ILLEGAL REQUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF RANGE. 

If table 86 defines that the value in the byte transfer length field is used, then the byte transfer length 
field specifies the number of bytes of data that the device server shall transfer from the data-out buffer and 
write to the specified logical block or physical block. If the byte transfer length field is not set to zero and 
does not match the data length that the device server returns for a READ LONG command, then the device 
server shall complete the command with CHECK CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to INVALID FIELD IN CDB. In the sense data (see 4.14 and 
SPC-4), the ili and valid bits shall be set to one and the information field shall be set to the difference (i.e., 
residue) of the requested length minus the actual length in bytes. Negative values shall be indicated by two's 
complement notation. If the byte transfer length field is set to zero, then no bytes shall be written. This 
condition shall not be considered an error. 

The contents of the control byte are defined in SAM-4. 

5.36 WRITE LONG (16) command 

The WRITE LONG (16) command (see table 87) requests that the device server mark a logical block or 
physical block as containing an error, or transfer data for a single logical block or physical block from the 
data-out buffer and write it to the medium. The data written shall be the same length and shall be in the same 
order as the data returned by the READ LONG (16) command (see 5.17). The device server shall write the 
logical block or physical block to the medium, and shall not complete the command with GOOD status until the 
logical block has been written on the medium without error. This command is implemented as a service action 
of the SERVICE ACTION OUT operation code (see A.2). 


Table 87 — WRITE LONG (16) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (9Fh) 

1 

COR_DIS WRJJNCOR PBLOCK SERVICE ACTION (11 h) 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

9 

... ". (LSB) 

10 

f^050PYGd 

11 


12 

(MSB) 

BYTE TRANSFER LENGTH 

13 

(LSB) 

14 

Reserved 

15 

CONTROL 


The operation code field and service action field are defined in SPC-4 and shall be set to the values 
defined in table 87. 

See the WRITE LONG (10) command (see 5.35) for the definitions of the fields in this command. 
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5.37 WRITE SAME (10) command 

The WRITE SAME (10) command (see table 88) requests that the device server transfer a single logical block 
from the data-out buffer and write the contents of that logical block, with modifications based on the lbdata bit 
and the pbdata bit, to the specified range of LBAs. Each logical block includes user data and may include 
protection information, based on the wrprotect field and the medium format. 


Table 88 — WRITE SAME (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (41 h) 

1 

wrprotect Reserved pbdata lbdata Obsolete 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

5 

(LSB) 

6 

Reserved group number 

7 

(MSB) 

NUMBER OF LOGICAL BLOCKS 

8 

. “. (LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 88. 

See the WRITE (10) command (see 5.27) for the definitions of the control byte and wrprotect field. See 
the PRE-FETCH (10) command (see 5.4) for the definition of the logical block address field. See the 
PRE-FETCH (10) command (see 5.4) and 4.18 for the definition of the group number field. 
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Table 89 describes the lbdata bit and the pbdata bit. 


Table 89 — lbdata bit and pbdata bit 


LBDATA 

PBDATA 

Description 



The device server shall write the single block of user data received from the 
data-out buffer to each logical block without modification. 

0 

0 

If the medium is formatted with type 1 or type 2 protection information, then: 

a) the value in the logical block reference tag field received in the single 
block of data from the data-out buffer shall be placed into the logical 
block reference tag field of the first logical block written to the medium. 
Into each of the subsequent logical blocks, the device server shall place 
into the logical block reference tag field the value of the previous 
logical block’s logical block reference tag field plus one; 

b) If the ato bit is set to one in the Control mode page (see SPC-4), then the 
logical block application tag received in the single block of data shall be 
placed in the logical block application tag field of each logical block. If 
the ato bit is set to zero, then the device server may write any value into 
the logical block application tag field of each logical block; and 

c) The value in the logical block guard field received in the single block of 
data from the data-out buffer shall be placed in the logical block guard 
field of each logical block. 



If the medium is formatted with type 3 protection information: 

a) If the ato bit is set to one in the Control mode page (see SPC-4), then the 
logical block reference tag received in the single block of data shall be 
placed in the logical block reference tag field of each logical block. If 
the ato bit is set to zero, then the device server may write any value into 
the LOGICAL BLOCK reference tag field of each logical block; 

b) If the ato bit is set to one in the Control mode page (see SPC-4), then the 
logical block application tag received in the single block of data shall be 
placed in the logical block reference tag field of each logical block. If 
the ato bit is set to zero, then the device server may write any value into 
the LOGICAL BLOCK reference tag field of each logical block; and 

c) The value in the logical block guard field received in the single block of 
data from the data-out buffer shall be placed in the logical block guard 
field of each logical block. 

0 

1 a 

The device server shall replace the first eight bytes of the block received from the 
data-out buffer to each physical sector with the physical address of the sector 
being written using the physical sector format (see 5.2.2.4.5). 

1 a 

0 

The device server shall replace the first four bytes of the block received from the 
data-out buffer with the least significant four bytes of the LBA of the block being 
written, ending with the least significant byte (e.g., if the LBA is 

7766_5544_3322_110Oh, 3322_1100h is written with 33h written first and OOh 
written last). 

1 

1 

The device server shall terminate the command with CHECK CONDITION status 
with the sense key set to ILLEGAL REQUEST and the additional sense code set 
to INVALID FIELD IN CDB. 

a If the medium is formatted with protection information, then the protection information shall be written 
to a default value of FFFF_FFFF_FFFF_FFFFh in each of the written logical blocks. 


The number of logical blocks field specifies the number of contiguous logical blocks to be written, starting 
with the logical block specified by the logical block address field. A number of logical blocks field set to 
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zero specifies that the device server write all the logical blocks starting with the one specified in the logical 
block address field to the last logical block on the medium. If the LBA plus the number of logical blocks 
exceeds the capacity of the medium, then the device server shall terminate the command with CHECK 
CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set to 
LOGICAL BLOCK ADDRESS OUT OF RANGE. 

5.38 WRITE SAME (16) command 

The WRITE SAME (16) command (see table 90) requests that the device server transfer a single logical block 
from the data-out buffer and write the contents of that logical block, with modifications based on the lbdata bit 
and the pbdata bit, to the specified range of LBAs. Each logical block includes user data and may include 
protection information, based on the wrprotect field and the medium format. 


Table 90 — WRITE SAME (16) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (93h) 

1 

wrprotect Reserved pbdata lbdata Reserved 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

9 

... (LSB) 

10 

(MSB) 

NUMBER OF LOGICAL BLOCKS 

13 

(LSB) 

14 

Reserved group number 

15 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 90. 

See the WRITE SAME (10) command (see 5.37) for the definitions of the other fields in this command. 
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5.39 WRITE SAME (32) command 

The WRITE SAME (32) command (see table 91) requests that the device server transfer a single logical block 
from the data-out buffer and write the contents of that logical block, with modifications based on the lbdata bit 
and the pbdata bit, to the specified range of LBAs. Each logical block includes user data and may include 
protection information, based on the wrprotect field and the medium format. 


Table 91 — WRITE SAME (32) command 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


Reserved 


5 



6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

SERVICE ACTION (000Dh) 


9 


(LSB) 

10 

wrprotect Reserved pbdata lbdata Reserved 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 


19 


(LSB) 

20 

(MSB) 

EXPECTED INITIAL LOGICAL BLOCK REFERENCE TAG 


23 


(LSB) 

24 

(MSB) 

EXPECTED LOGICAL BLOCK APPLICATION TAG 


25 


(LSB) 

26 

(MSB) 

LOGICAL BLOCK APPLICATION TAG MASK 


27 


(LSB) 

28 

(MSB) 

NUMBER OF LOGICAL BLOCKS 


31 


(LSB) 


The operation code field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 91. 

See the WRITE SAME (10) command (see 5.37) for the definitions of the control byte, group number field, 
the wrprotect field, the pbdata bit, the lbdata bit, the logical block address field, and the number of 

LOGICAL BLOCKS field. 

When checking of the logical block reference tag field is enabled (see table 76 in 5.27), the expected 
INITIAL LOGICAL BLOCK REFERENCE TAG field contains the value of the LOGICAL BLOCK REFERENCE TAG field 
expected in the protection information of the first logical block accessed by the command instead of a value 
based on the LBA (see 4.17.3). 

If the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application TAG field is enabled (see table 76 in 5.27), then the logical block application tag mask field 
contains a value that is a bit mask for enabling the checking of the logical block application tag field in the 
protection information for each logical block accessed by the command. A logical block application tag 
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mask bit set to one enables the checking of the corresponding bit of the expected logical block application 
tag field with the corresponding bit of the logical block application tag field in the protection information. 

If the ato bit is set to one in the Control mode page (see SPC-4) and checking of the logical block 
application tag field is disabled (see table 76 in 5.27), or if the ato bit is set to zero, then the logical block 
application TAG mask field and the expected logical block application tag field shall be ignored. 

5.40 XDREAD (10) command 

The XDREAD (10) command (see table 92) requests that the device transfer to the data-in buffer the XOR 
data generated by an XDWRITE command (see 5.42 and 5.43). XOR data includes user data and may 
include protection information, based on the xorpinfo bit and the medium format. 


Table 92 — XDREAD (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (52h) 

1 

Reserved xorpinfo 

2 

(MSB) 

5 

(LSB) 

6 

Reserved group number 

7 

(MSB) 

TRANSFER LENGTH 

8 

(LSB) 

9 

control 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 92. 

See the PRE-FETCH (10) command (see 5.4) and 4.18 for the definition of the group number field. 

If the XOR protection information (xorpinfo) bit is set to zero, then the device server shall not check or 
transmit protection information. 

If the xorpinfo bit is set to one, the device server supports protection information, and the medium has been 
formatted with protection information, then the device server shall transmit protection information but shall not 
check any of the protection information fields. 

If the xorpinfo bit is set to one, the device server supports protection information, and the medium has not 
been formatted with protection information, then the device server shall terminate the command with CHECK 
CONDITION status with the sense key set to ILLEGAL REQUEST and the additional sense code set to 
INVALID FIELD IN CDB. 

If the xorpinfo bit is set to one, and the device server does not support protection information, then the device 
server should terminate the command with CHECK CONDITION status with the sense key set to ILLEGAL 
REQUEST and the additional sense code set to INVALID FIELD IN CDB. 

The XOR data transferred is identified by the logical block address field and the transfer length field. 
The logical block address field and transfer length field shall be the same as, or a subset of, those 
specified in a prior XDWRITE command. If a match is not found, then the device server shall terminate the 
command with CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional 
sense code set to INVALID FIELD IN CDB. The transfer length field is constrained by the maximum 
transfer length field in the Block Limits VPD page (see 6.4.2). 

The contents of the control byte are defined in SAM-4. 
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5.41 XDREAD (32) command 

The XDREAD (32) command (see table 93) requests that the device transfer to the data-in buffer the XOR 
data generated by an XDWRITE command (see 5.42 and 5.43). XOR data includes user data and may 
include protection information, based on the xorpinfo bit and the medium format. 


Table 93 — XDREAD (32) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 

f^030PY0(j 

5 


6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

SERVICE ACTION (0003h) 

9 

(LSB) 

10 

Reserved xorpinfo 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 

19 

.. (LSB) 

20 

p^030PY0(j 

27 


28 

(MSB) 

TRANSFER LENGTH 

31 

(LSB) 


The operation code field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the value defined in table 93. 

See the XDREAD (10) command (see 5.40) and SPC-4 for the definitions of the other fields in this command. 
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5.42 XDWRITE (10) command 

The XDWRITE (10) command (see table 94) requests that the device server: 

1) read the specified logical block(s); 

2) transfer logical blocks from the data-out buffer; 

3) perform an XOR operation with the logical blocks transferred from the data-out buffer and the logical 
blocks read, storing the resulting XOR data in a buffer; and 

4) if the disable write bit is set to zero, then write the logical blocks transferred from the data-out buffer. 

Each logical block includes user data and may include protection information, based on the wrprotect field 
and the medium format. The resulting XOR data shall be retained as specified in 4.15.4. 


Table 94 —XDWRITE (10) command 


Bit 

Byte 

7 6 5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (50h) 

1 

WRPROTECT 

DPO 

FUA 

DISABLE 

WRITE 

FUA_NV 

Reserved 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 


5 


(LSB) 

6 

Reserved group number 

7 

(MSB) 

TRANSFER LENGTH 


8 


(LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 94. 

See the WRITE (10) command (see 5.27) for the definitions of the wrprotect field, the fua bit, and the 
fua_nv bit. See the READ (10) command (see 5.8) for the definition of the dpo bit. See the PRE-FETCH (10) 
command (see 5.4) for the definition of the logical block address field. See the PRE-FETCH (10) command 
(see 5.4) and 4.18 for the definition of the group number field. 

A disable write bit set to zero specifies that the data transferred from the data-out buffer shall be written to 
the medium after the XOR operation is complete. A disable write bit set to one specifies that the data shall 
not be written to the medium. 

The transfer length field specifies the number of contiguous logical blocks of data that read, transferred 
from the data-out buffer, and XORed into a buffer, starting with the logical block specified by the logical 
block address field. If the LBA plus the transfer length exceeds the capacity of the medium, then the device 
server shall terminate the command with CHECK CONDITION status with the sense key set to ILLEGAL 
REOUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF RANGE. The 
transfer length field is constrained by the maximum transfer length field in the Block Limits VPD page 
(see 6.4.2). 

The resulting XOR data is retrieved by an XDREAD command (see 5.40 and 5.41) with starting logical block 
address field and transfer length field that match, or are a subset of, the logical block address field and 
transfer length field of this command. 

The contents of the control byte are defined in SAM-4. 


Working Draft SCSI Block Commands - 3 (SBC-3) 


125 




T10/1799-D Revision 16 


25 August 2008 


5.43 XDWRITE (32) command 

The XDWRITE (32) command (see table 95) requests that the device server: 

1) read the specified logical block(s); 

2) transfer logical blocks from the data-out buffer; 

3) perform an XOR operation with the logical blocks transferred from the data-out buffer and the logical 
blocks read, storing the resulting XOR data in a buffer; and 

4) if the disable write bit is set to zero, then write the logical blocks transferred from the data-out buffer. 

Each logical block includes user data and may include protection information, based on the wrprotect field 
and the medium format. The resulting XOR data shall be retained as specified in 4.15.4. 


Table 95 — XDWRITE (32) command 


Bit 

Byte 

7 6 5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


Reserved 


5 



6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

SERVICE ACTION (0004h) 


9 


(LSB) 

10 

WRPROTECT 

DPO 

FUA 

DISABLE 

WRITE 

FUA_NV 

Reserved 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 


19 


(LSB) 

20 


Reserved 


27 



28 

(MSB) 

TRANSFER LENGTH 


31 


(LSB) 


The operation code field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 95. 

See the XDWRITE (10) command (see 5.42) and SPC-4 for the definitions of the other fields in this command. 
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5.44 XDWRITEREAD (10) command 

The XDWRITEREAD (10) command (see table 96) requests that the device server: 

1) read the specified logical block(s); 

2) transfer logical blocks from the data-out buffer; 

3) XOR the logical blocks transferred from the data-out buffer with the logical blocks read, storing the 
resulting XOR data in a buffer; 

4) if the disable write bit is set to zero, then write the logical blocks transferred from the data-out buffer; 
and 

5) transfer the resulting XOR data to the data-in buffer. 

Each logical block includes user data and may include protection information, based on the wrprotect field, 
the xorpinfo bit, and the medium format. This command is equivalent to an XDWRITE (10) command (see 
5.42) followed by an XDREAD (10) command (see 5.40) specifying the same values for the group number 
field, the logical block address field, and the transfer length field. This command is only available on 
transport protocols supporting bidirectional commands. 


Table 96 — XDWRITEREAD (10) command 


Bit 

Byte 

7 6 5 

4 

3 

2 

1 

0 

0 

| OPERATION CODE (53h) 

1 

WRPROTECT 

DPO 

FUA 

DISABLE 

WRITE 

FUA_NV 

XORPINFO 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 


5 


(LSB) 

6 

Reserved group number 

7 

(MSB) 

TRANSFER LENGTH 

(LSB) 

8 


9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 96. 

See the XDWRITE (10) command (see 5.42) and XDREAD (10) command (see 5.40) for the definitions of the 
other fields in this command. 
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5.45 XDWRITEREAD (32) command 

The XDWRITEREAD (32) command (see table 97) requests that the device server: 

1) read the specified logical block(s); 

2) transfer logical blocks from the data-out buffer; 

3) XOR the logical blocks transferred from the data-out buffer with the logical blocks read, storing the 
resulting XOR data in a buffer; 

4) if the disable write bit is set to zero, then write the logical blocks transferred from the data-out buffer; 
and 

5) transfer the resulting XOR data to the data-in buffer. 

Each logical block includes user data and may include protection information, based on the wrprotect field, 
the xorpinfo bit, and the medium format. This command is equivalent to an XDWRITE (32) command (see 
5.43) followed by an XDREAD (32) command (see 5.41) specifying the same values for the group number 
field, the logical block address field, and the transfer length field. This command is only available on 
transport protocols supporting bidirectional commands. 


Table 97 — XDWRITEREAD (32) command 


Bit 

Byte 

7 6 5 

4 

3 

2 

1 

0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


Reserved 


5 



6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

SERVICE ACTION (0007h) 


9 


(LSB) 

10 

WRPROTECT 

DPO 

FUA 

DISABLE 

WRITE 

FUA_NV 

XORPINFO 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 


19 


(LSB) 

20 


Reserved 


27 



28 

(MSB) 

TRANSFER LENGTH 


31 


(LSB) 


The operation code field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 97. 

See the XDWRITEREAD (10) command (see 5.44) and SPC-4 for the definitions of the fields in this 
command. 


128 


Working Draft SCSI Block Commands - 3 (SBC-3) 




25 August 2008 


T10/1799-D Revision 16 


5.46 XPWRITE (10) command 

The XPWRITE (10) command (see table 98) requests that the device server: 

1) read the specified logical block(s); 

2) transfer logical blocks from the data-out buffer; and 

3) XOR the logical blocks transferred from the data-out buffer with the logical blocks read, writing the 
resulting XOR data. 

Each logical block includes user data and may include protection information, based on the xorpinfo bit and 
the medium format. 


Table 98 — XPWRITE (10) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (51 h) 

1 

Reserved dpo fua Reserved fua_nv xorpinfo 

2 

(MSB) 

LOGICAL BLOCK ADDRESS 

5 

(LSB) 

6 

Reserved group number 

7 

(MSB) 

TRANSFER LENGTH 

8 

(LSB) 

9 

CONTROL 


The operation code field is defined in SPC-4 and shall be set to the value defined in table 98. 

See the READ (10) command (see 5.8) for the definition of the dpo bit. See the WRITE (10) command (see 
5.27) for the definitions of the fua bit and the fua_nv bit. See the PRE-FETCH (10) command (see 5.4) for the 
definition of the logical block address field. See the PRE-FETCH (10) command (see 5.4) and 4.18 for the 
definition of the group number field. 

If the XOR protection information (xorpinfo) bit is set to zero, the device server supports protection 
information, and the medium has been formatted with protection information, then the device server shall 
terminate the command with CHECK CONDITION status with the sense key set to ILLEGAL REOUEST and 
the additional sense code set to INVALID FIELD IN CDB. 

If the xorpinfo bit is set to one, the device server supports protection information, and the medium has been 
formatted with protection information, then the device server shall XOR the user data and protection 
information transferred from the data-out buffer with the user data and protection information read, and then 
write the resulting XOR data. The device server shall not check any of the protection information fields. 

If the xorpinfo bit is set to one, the device server supports protection information, and the medium has not 
been formatted with protection information, then the device server shall terminate the command with CHECK 
CONDITION status with the sense key set to ILLEGAL REOUEST and the additional sense code set to 
INVALID FIELD IN CDB. 

If the xorpinfo bit is set to one, and the device server does not support protection information, then the device 
server should terminate the command with CHECK CONDITION status with the sense key set to ILLEGAL 
REOUEST and the additional sense code set to INVALID FIELD IN CDB. 

The transfer length field specifies the number of contiguous logical blocks that shall be read, XORed with 
logical blocks transferred from the data-out buffer, and written, starting with the logical block specified by the 
logical block address field. If the LBA plus the transfer length exceeds the capacity of the medium, then the 
device server shall terminate the command with CHECK CONDITION status with the sense key set to 
ILLEGAL REOUEST and the additional sense code set to LOGICAL BLOCK ADDRESS OUT OF RANGE. 
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The transfer length field is constrained by the maximum transfer length field in the Block Limits VPD 
page (see 6.4.2). 

The contents of the control byte are defined in SAM-4. 

5.47 XPWRITE (32) command 

The XPWRITE (32) command (see table 99) requests that the device server: 

1) read the specified logical block(s); 

2) transfer logical blocks from the data-out buffer; and 

3) XOR the logical blocks transferred from the data-out buffer with the logical blocks read, writing the 
resulting XOR data. 

Each logical block includes user data and may include protection information, based on the xorpinfo bit and 
the medium format. 


Table 99 — XPWRITE (32) command 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

OPERATION CODE (7Fh) 

1 

CONTROL 

2 


5 


6 

Reserved group number 

7 

ADDITIONAL CDB LENGTH (18h) 

8 

(MSB) 

9 

(LSB) 

10 

Reserved dpo fua Reserved fua_nv xorpinfo 

11 

Reserved 

12 

(MSB) 

LOGICAL BLOCK ADDRESS 

19 

.. (LSB) 

20 

Reserved 

27 


28 

(MSB) 

TRANSFER LENGTH 

31 

(LSB) 


The operation CODE field, additional cdb length field, and service action field are defined in SPC-4 and 
shall be set to the values defined in table 99. 

See the XPWRITE (10) command (see 5.46) and SPC-4 for the definitions of the fields in this command. 
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6 Parameters for direct-access block devices 

6.1 Diagnostic parameters 

6.1.1 Diagnostic parameters overview 

This subclause defines the descriptors and pages for diagnostic parameters used with direct-access block 
devices. The diagnostic page codes for direct-access block devices are defined in table 100. 


Table 100 — Diagnostic page codes 


Diagnostic page code 

Description 

Reference 

OOh 

Supported diagnostic pages 

SPC-4 

01 h to 2Fh 

SCSI enclosure services diagnostic pages 

SES-2 

30h to 3Fh 

Diagnostic pages assigned by SPC-4 

SPC-4 

40h 

Translate Address Output diagnostic page 

6.1.2 

Translate Address Input diagnostic page 

6.1.3 

41h 

Obsolete (Device Status diagnostic pages) 

42h to 7Fh 

Reserved for this standard 

80h to FFh 

Vendor-specific diagnostic pages 


6.1.2 Translate Address Output diagnostic page 

The Translate Address diagnostic pages allow the application client to translate an address in one of the 
formats supported by the FORMAT UNIT command (see 5.2.2.4) (i.e., a short block format address, a long 
block format address, a physical sector format address, or a bytes from index format address) into any one of 
the other formats. The address to be translated is sent to the device server with the SEND DIAGNOSTIC 
command and the results are returned to the application client by the RECEIVE DIAGNOSTIC RESULTS 
command. 

Table 101 defines the format of the Translate Address Output diagnostic page sent with the SEND 
DIAGNOSTIC command. The translated address is returned in the Translate Address Input diagnostic page 
(see 6.1.3). 


Table 101 — Translate Address Output diagnostic page 


Bit 

Byte 

7 6 5 4 3 

2 1 0 

0 

PAGE CODE (40h) 

1 

Reserved 

2 

(MSB) 

3 

(LSB) 

4 

Reserved 

SUPPLIED FORMAT 

5 

Reserved 

TRANSLATE FORMAT 

6 

(MSB) 

13 

(LSB) 
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The page code field and page length field are defined in SPC-4 and shall be set to the values defined in 
table 101. 

The supplied format field specifies the format of the address to translate field. Valid values for this field 
are defined in the defect list format field of the FORMAT UNIT command (see 5.2). If the device server 
does not support the requested format it shall terminate the SEND DIAGNOSTIC command with CHECK 
CONDITION status with the sense key set to ILLEGAL REOUEST and the additional sense code set to 
INVALID FIELD IN PARAMETER LIST. 

The translate format field specifies the format the device server shall use for the result of the address 
translation. Valid values for this field are defined in the defect list format field of the FORMAT UNIT 
command. If the device server does not support the specified format it shall terminate the SEND 
DIAGNOSTIC command with CHECK CONDITION status with the sense key set to ILLEGAL REOUEST and 
the additional sense code set to INVALID FIELD IN PARAMETER LIST. 

The address to translate field contains a single address descriptor which the application client is 
requesting the device server to translate. The format of this field depends on the value in the supplied format 
field. The formats are described in 5.2.2.4. If the short block format address descriptor is specified, the first 
four bytes of the address to translate field shall contain the short block format address descriptor and the 
last four bytes shall contain 0000_0000h. 

6.1.3 Translate Address Input diagnostic page 

Table 102 defines the Translate Address Input diagnostic page retrieved with the RECEIVE DIAGNOSTIC 
RESULTS command after the Translate Address Output diagnostic page (see 6.1.2) has been sent with the 
SEND DIAGNOSTIC command. If a Translate Address Output diagnostic page has not yet been processed, 
the results of a RECEIVE DIAGNOSTIC RESULTS command requesting this diagnostic page are 
vendor-specific. 


Table 102 — Translate Address Input diagnostic page 


Byte\Bit 

7 6 5 4 3 21 ° 

0 

PAGE CODE (40h) 

1 

Reserved 

2 

(MSB) 

PAGE LENGTH (n - 3) 

3 

(LSB) 

4 

Reserved 

SUPPLIED FORMAT 

5 

RAREA ALTSEC alttrk Reserved 

TRANSLATED FORMAT 

Translated address(es) 

6 

(MSB) 

translated address 1 

13 

(LSB) 



n - 7 

(MSB) 

translated address x (if required) 

n 

(LSB) 


The page code field is defined in SPC-4 and shall be set to the value defined in table 102. 

The PAGE LENGTH field is defined in SPC-4. 

The Translate Address Input diagnostic page contains a four-byte page header that specifies the page code 
and length followed by two bytes that describe the translated address followed by zero or more translated 
addresses. 

The page length field contains the number of parameter bytes that follow. 
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The supplied format field contains the value from the supplied format field in the previous Translate 
Address Output diagnostic page (see 6.1.2). 

A reserved area (rarea) bit set to zero indicates that no part of the translated address falls within a reserved 
area of the medium. A rarea bit set to one indicates that all or part of the translated address falls within a 
reserved area of the medium (e.g., speed tolerance gap, alternate sector, or vendor reserved area). If the 
entire translated address falls within a reserved area, the device server may not return a translated address. 

An alternate sector (altsec) bit set to zero indicates that no part of the translated address is located in an 
alternate sector of the medium or that the device server is unable to determine this information. An altsec bit 
set to one indicates that the translated address is physically located in an alternate sector of the medium. If 
the device server is unable to determine if all or part of the translated address is located in an alternate sector 
it shall set this bit to zero. 

An alternate track (alttrk) bit set to zero indicates that no part of the translated address is located on an 
alternate track of the medium. An alttrk bit set to one indicates that part or all of the translated address is 
located on an alternate track of the medium or the device server is unable to determine if all or part of the 
translated address is located on an alternate track. 

The translated format field contains the value from the translate format field in the previous Translate 
Address Output diagnostic page (see 6.1.2). 

The translated address field(s) contains the address(es) the device server translated from the address 
supplied by the application client in the previous Translate Address Output diagnostic page. Each field shall 
be in the format specified in the translate format field. The formats are described in 5.2.2.4. If the short 
block format address descriptor is specified, the first four bytes of the translated address field shall contain 
the short block format address descriptor and the last four bytes shall contain 0000_0000h. 

If the returned data is in short block format, long block format, or physical sector format and the address to 
translate field in the previous Translate Address Output diagnostic page covers more than one address after 
it has been translated (e.g., because of multiple physical sectors within a single logical block or multiple logical 
blocks within a single physical sector) the device server shall return all possible addresses that are contained 
in the area specified by the address to be translated. If the returned data is in bytes from index format, the 
device server shall return a pair of translated values for each of the possible addresses that are contained in 
the area specified by the address to translate field in the previous Translate Address Output diagnostic 
page. Of the pair of translated values returned, the first indicates the starting location and the second the 
ending location of the area. 
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6.2 Log parameters 

6.2.1 Log parameters overview 

This subclause defines the descriptors and pages for log parameters used with direct-access block devices. 
See SPC-4 for a detailed description of logging operations. The log page codes for direct-access block 
devices are defined in table 103. 


Table 103 — Log page codes 


Page code a 

Subpage code a 

Description 

Reference 

OOh 

OOh 

Supported Log Pages log page 

SPC-4 

OOh 

FFh 

Supported Log Pages and Subpages 

SPC-4 

Olh 

OOh 

Buffer Over-Run/Under-Run log page 

SPC-4 

01 h to 3Fh 

FFh 

Supported Subpages 

SPC-4 

02h 

OOh 

Write Error Counter log page 

SPC-4 

03h 

OOh 

Read Error Counter log page 

SPC-4 

04 h 

OOh to FEh 

Reserved 

05h 

OOh 

Verify Error Counter log page 

SPC-4 

06h 

OOh 

Non-Medium Error log page 

SPC-4 

07h 

OOh 

Last n Error Events log page 

SPC-4 

08h 

OOh 

Format Status log page 

6.2.3 

09h 

OOh 

Restricted (see SPC-4) 

OAh 

OOh 

Restricted (see SPC-4) 

OBh 

OOh 

Last n Deferred Errors Or Asynchronous Events log page 

SPC-4 

OCh 

OOh 

Reserved 

ODh 

OOh 

Temperature log page 

SPC-4 

OEh 

OOh 

Start-Stop Cycle Counter log page 

SPC-4 

OFh 

OOh 

Application Client log page 

SPC-4 

lOh 

OOh 

Self-Test Results log page 

SPC-4 

11h to 14h 

OOh to FEh 

Reserved 

15h 

OOh 

Background Scan Results log page 

6 . 2.2 

16h 

OOh to FEh 

Reserved 

17h 

OOh 

Non-volatile Cache log page 

6.2.4 

18h 

OOh to FEh 

Protocol-Specific Port log pages 

SPC-4 

19h to 2Eh 

OOh to FEh 

Reserved 

2Fh 

OOh 

Informational Exceptions log page 

SPC-4 

30h to 3Eh 

OOh to FEh 

Vendor-specific 

3Fh 

OOh to FEh 

Reserved 

a All page code and subpage code combinations not shown in this table are reserved. 
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6.2.2 Background Scan Results log page 

The Background Scan Results log page (see table 104) contains the Background Scanning Status parameter 
and zero or more Background Medium Scan parameters. The Background Scanning Status parameter 
provides information about background pre-scan and background medium scan operations. Each Background 
Medium Scan parameter provides information about a logical block where an error was detected during a 
background scanning operation. If the Background Scan Results log page is full, and a new error is detected 
during a background scanning operation, then the device server overwrites the oldest Background Medium 
Scan parameter with the Background Medium Scan parameter for the new error. When a LOG SELECT 
command with the pcr bit set to one is processed, the device server shall: 

a) delete all Background Medium Scan parameters; and 

b) not change the values in the Background Scanning Status parameter. 


Table 104 — Background Scan Results log page 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

DS (1) 

SPF (0) 

PAGE CODE (15h) 

1 

SUBPAGE CODE(00h) 

2 

(MSB) 

PAGE LENGTH (n - 3) 


3 


(LSB) 

Background Scan Results log parameters 

4 


Background Scanning Status parameter (see table 106) 


19 



Background Medium Scan parameter list 

20 


Background Medium Scan parameter (first) (see table 109) 


43 





n-23 


Background Medium Scan parameter (last) (see table 109) 


n 




The disable save (ds) bit, the SubPage Format (spf) bit, the page code field, and the page length field are 
described in SPC-4. 

The disable save (ds) bit, the SubPage Format (spf) bit, and the page code field shall be set to the values 
defined in table 104. 

Table 105 defines the parameter codes for the Background Scan Results log page. 


Table 105 — Background Scan Results log page parameter codes 


Parameter code 

Description 

OOOOh 

Background Scanning Status 

0001 h to 0800h 

Background Medium Scan 

0801 h to FFFFh 

Reserved 
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The Background Scanning Status parameter (see table 106) contains status information about the 
background pre-scan and background medium scan features. 


Table 106 — Background Scanning Status parameter format 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

(MSB) 

1 

(LSB) 

2 

Parameter control byte 

du Obsolete tsd etc tmc format and linking 

3 

PARAMETER LENGTH (OCh) 

4 

(MSB) 

ACCUMULATED POWER ON MINUTES 

7 

".“ ‘ (LSB) 

8 

Reserved 

9 

BACKGROUND SCANNING STATUS 

10 

(MSB) 

NUMBER OF BACKGROUND SCANS PERFORMED 

11 

..... . (LSB) 

12 

(MSB) 

BACKGROUND MEDIUM SCAN PROGRESS 

13 

~~ (LSB) 

14 

(MSB) 

NUMBER OF BACKGROUND MEDIUM SCANS PERFORMED 

15 

.... (LSB) 


The parameter code field shall be set to the value defined in table 106. 
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Table 107 defines the values for the log parameter control byte (see SPC-4) for this log parameter. 


Table 107 — Parameter control byte for Background Scanning Status log parameter 


Field 

Value for 
LOG 
SENSE 

Value for 
LOG 
SELECT 

Description 

DU 

0 

0 or 1 
(i-e., 
ignored) 

The du bit is not defined for list parameters, so shall be set to zero 
when read with the LOG SENSE command and shall be ignored 
when written with the LOG SELECT command. 

TSD 

0 or 1 

0 or 1 

When the tsd bit is set to zero, the device server shall save the log 
parameter to its medium at vendor specific intervals. When the tsd 
bit is set to one, implicit saving of the log parameter is disabled by an 
application client. 

ETC 

0 

0 or 1 
(i-e., 
ignored) 

The etc bit is not defined for list parameters, so shall be set to zero 
when read with the LOG SENSE command and shall be ignored 
when written with the LOG SELECT command. 

TMC 

00b 

any (i.e., 
ignored) 

The tmc field is not defined for list parameters, so shall be set to 00b 
when read with the LOG SENSE command and shall be ignored 
when written with the LOG SELECT command. 

FORMAT 

AND 

LINKING 

11b 

11b 

The log parameter is a binary format list parameter. 


The parameter length field indicates the number of bytes to follow in the log parameter and shall be set to 
the value defined in table 106. 

The accumulated power on minutes field indicates the number of minutes the device server has been 
powered on since manufacturing. 

Table 108 defines the background scanning status field. 


Table 108 — background scanning status field 


Code 

Description 

OOh 

No background scans active, and background scanning is disabled (i.e., the 
en_bms bit is set to zero in the Background Control mode page (see 6.3.3)). 

Olh 

Background medium scan is active 

02 h 

Background pre-scan is active 

03h 

Background medium scan halted due to fatal error 

04 h 

Background medium scan halted due to a vendor-specific pattern of errors 

05h 

Background medium scan halted due to medium formatted without P-list 

06 h 

Background medium scan halted - vendor-specific cause 

07h 

Background medium scan halted due to temperature out of allowed range 

08h 

Background scanning is enabled (i.e., the en_bms bit is set to one in the 
Background Control mode page (see 6.3.3)), and no background medium scan is 
active (i.e., the device server is waiting for Background Medium Scan Interval 
timer expiration before starting the next background medium scan). 

09h to FFh 

Reserved 
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The number of background scans performed field indicates the number of background scans (i.e., the total 
number of background pre-scans plus the number of background medium scans) that have been performed 
since the SCSI target device was originally shipped by the manufacturer. 

The background medium scan progress field is a percent complete indication of the background medium 
scan. The returned value is a numerator that has 65 536 (i.e., 1_0000h) as its denominator. If there is no 
background scan in progress (i.e., no background scan has been initiated since power on or the most recent 
scan has completed), then the device server shall set the background medium scan progress field to OOOOh. 

The number of background medium scans performed field indicates the number of background medium 
scans that have been performed since the SCSI target device was originally shipped by the manufacturer. If 
the number of background medium scans performed field contains OOOOh, then the number of background 
medium scans is not reported. 

The total number of background pre-scans that have been performed is the value in the number of 
background scans performed field minus the value in the number of background medium scans 

PERFORMED field. 

A Background Medium Scan parameter (see table 109) describes a defect location on the medium that was 
encountered during a background scanning operation (see 4.19.2 and 4.19.3). 


Table 109 — Background Medium Scan parameter format 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

(MSB) 

PARAMETER CODE (0001 h to 0800h) 

1 

(LSB) 

2 

Parameter control byte 

du Obsolete tsd etc tmc format and linking 

3 

PARAMETER LENGTH (14h) 

4 

(MSB) 

ACCUMULATED POWER ON MINUTES 

7 

“ ' '. " (LSB) 

8 

REASSIGN STATUS SENSE KEY 

9 

ADDITIONAL SENSE CODE 

10 

ADDITIONAL SENSE CODE QUALIFIER 

11 

Vendor-specific 

15 


16 

(MSB) 

LOGICAL BLOCK ADDRESS 

23 

(LSB) 
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Table 110 defines the values for the log parameter control byte (see SPC-4) for this log parameter. 


Table 110 — Parameter control byte for Background Medium Scan log parameter 


Field 

Value for 
LOG 
SENSE 

Value for 
LOG 
SELECT 

Description 

DU 

0 

0 or 1 
(i-e., 
ignored) 

The du bit is not defined for list parameters, so shall be set to zero 
when read with the LOG SENSE command and shall be ignored 
when written with the LOG SELECT command. 

TSD 

0 or 1 

0 or 1 

When the tsd bit is set to zero, the device server shall save the log 
parameter to its medium at vendor specific intervals. When the tsd 
bit is set to one, implicit saving of the log parameter is disabled by an 
application client. 

ETC 

0 

0 or 1 
(i-e., 
ignored) 

The etc bit is not defined for list parameters, so shall be set to zero 
when read with the LOG SENSE command and shall be ignored 
when written with the LOG SELECT command. 

TMC 

00b 

any 

(i-e-, 

ignored) 

The tmc field is not defined for list parameters, so shall be set to 00b 
when read with the LOG SENSE command and shall be ignored 
when written with the LOG SELECT command. 

FORMAT 

AND 

LINKING 

11b 

11b 

The log parameter is a binary format list parameter. 


The parameter length field indicates the number of bytes to follow in the log parameter shall be set to the 
value defined in table 109. 

The accumulated power on minutes field indicates the number of minutes the device server has been 
powered on since manufacturing at the time the background scan error occurred. 
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Table 111 defines the reassign status field. 


Table 111 — reassign status field (part 1 of 2) 


Code 

Reported 

Description 

Oh 

No 

Reserved 

1h 

Yes 

An error was detected while reading the logical block specified by the logical block 
address field during a background scanning operation, and reassignment the logical 
block is pending receipt of: a b 

a) a command performing a write operation, if automatic write reallocation is 
allowed (i.e., the awre bit is set to one in the Read-Write Error Recovery mode 
page (see 6.3.6); or 

b) a REASSIGN BLOCKS command (see 5.18). 

2h 

No 

An error was detected while reading the logical block specified by the logical block 
address field during a background scanning operation and the logical block was 
successfully reassigned by the device server with recovered data. 

3h 

Reserved 

4h 

Yes 

An error was detected: 

a) while reading the logical block specified by the logical block address field 
during a background scanning operation; 

b) reassignment of the logical block by the device server failed; and 

c) the logical block may or may not have an uncorrectable error. 

5h 

No 

An error was detected while reading the logical block specified by the logical block 
address field during a background scanning operation and the error was corrected by 
the device server rewriting the logical block without reassignment. 

6h 

Yes 

An error was detected while reading the logical block specified by the logical block 
address field during a background scanning operation, and the logical block: 

a) was successfully reassigned by the application client: and 

b) contains valid data (e.g., as the result of reassignment by a REASSIGN 
BLOCKS command during which the data was recovered, or by a command 
performing a write operation). b 

7h 

Yes 

An error was detected while reading the logical block specified by the logical block 
address field during a background scanning operation, and the logical block: 

a) was successfully reassigned by the application client; and 

b) does not contain valid data (e.g., as a result of reassignment by a REASSIGN 
BLOCKS command during which the data was not recovered). b 

Key: 

Yes = The lowir bit is set to one in the Background Control mode page (see 6.3.3). 

No = The lowir bit is set to zero in the Background Control mode page. 

a If the application client knows the correct data for the logical block, then the application client should 
use a command performing a write operation to reassign the logical block using the correct data (e.g., in 
a redundancy group (see 4.15.1), the application client writes data to the logical block regenerated from 
the data on the other logical units in the redundancy group). If the application client uses a REASSIGN 
BLOCKS command to reassign the logical block, then the device server may not be able to recover the 
data and does not report whether or not the data was recovered. 
b The reassign status field in a given log parameter changes from 1h or 4h to 6h, 7h, or 8h when the 
logical block is reassigned, rewritten, or failed. If the logical block is reassigned or rewritten, any 
subsequent medium error occurring for the logical block is reported in a new log parameter with the 
same value in the logical block address field as the value in the logical block address field in the 
log parameter for the previous medium error for the logical block. 
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Table 111 — reassign status field (part 2 of 2) 


Code 

Reported 

Description 

8h 

Yes 

An error was detected while reading the logical block specified by the logical block 
address field during a background scanning operation and the logical block was not 
successfully reassigned by the application client (e.g., by a REASSIGN BLOCKS 
command that failed) 

9h to 
Fh 

Reserved 

Key: 



Yes = The lowir bit is set to one in the Background Control mode page (see 6.3.3). 

No = The lowir bit is set to zero in the Background Control mode page. 

a If the application client knows the correct data for the logical block, then the application client should 
use a command performing a write operation to reassign the logical block using the correct data (e.g., in 
a redundancy group (see 4.15.1), the application client writes data to the logical block regenerated from 
the data on the other logical units in the redundancy group). If the application client uses a REASSIGN 
BLOCKS command to reassign the logical block, then the device server may not be able to recover the 
data and does not report whether or not the data was recovered. 
b The reassign status field in a given log parameter changes from 1h or 4h to 6h, 7h, or 8h when the 
logical block is reassigned, rewritten, or failed. If the logical block is reassigned or rewritten, any 
subsequent medium error occurring for the logical block is reported in a new log parameter with the 
same value in the logical block address field as the value in the logical block address field in the 
log parameter for the previous medium error for the logical block. 


The sense key field, additional sense code field, and the additional sense code qualifier field may contain 
a hierarchy of additional information relating to error conditions that occurred during background scanning. 
The content of these fields is represented in the same format used by the sense data (see SPC-4). 

The logical block address field indicates the LBA associated with the medium error. 

6.2.3 Format Status log page 

The Format Status log page (log page code 08h) captures the state of the direct-access block device since 
the most recent successful FORMAT UNIT command (see 5.2) was completed. Additionally, this log page 
provides Defect Management information for the device server. 

The Format Status log page uses the log page format defined in SPC-4. 

Table 112 defines the parameter codes for the Format Status log page. 


Table 112 — Format Status log page parameter codes 


Parameter code 

Description 

OOOOh 

Format Data Out 

0001 h 

Grown Defects During Certification 

0002h 

Total Blocks Reallocated During Format 

0003h 

Total New Blocks Reallocated 

0004h 

Power On Minutes Since Format 

0005h to 7FFFh 

Reserved 

8000h to FFFFh 

Vendor-specific 
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The parameter length field of each log parameter (see SPC-4) contains the length of the corresponding 
parameter value field and is vendor-specific. 

Event counts are returned as a result of the LOG SENSE command. The default value for each event count 
listed table 112 shall be zero. Attempts to change these event counts by issuing a LOG SELECT with these 
fields set to non-zero values is not considered an error and shall have no effect on the saved values. 

If information about a log parameter is not available, the device server shall return a value with each byte set 
to FFh (e.g., if the parameter length field is set to 02h, the parameter value field is set to FFFFh). If the 
most recent FORMAT UNIT command failed, the device server shall return a value with each byte set to FFh 
for each log parameter. 

The Format Data Out parameter contains the entire FORMAT UNIT parameter list (see 5.2.2) from the most 
recent successful FORMAT UNIT command. This includes: 

a) the parameter list header; 

b) the initialization pattern descriptor, if any; and 

c) the defect list, if any. 

The Grown Defects During Certification parameter is a count of the number of defects detected as a result of 
performing certification during processing of the most recent successful FORMAT UNIT command. This count 
reflects only those defects detected and replaced that were not already part of the plist or gust. If a 
certification pass was not performed the grown defects during certification field shall be set to zero. 

The Total Blocks Reallocated During Format parameter is a count of the total number of logical blocks that 
were reallocated during the most recent successful FORMAT UNIT command. 

The Total New Blocks Reallocated parameter is a count of the total number of logical blocks that have been 
reallocated since the completion of the most recent successful FORMAT UNIT command. 

The Power On Minutes Since Format parameter represents the unsigned number of usage minutes (i.e., 
minutes with power applied regardless of power state) that have elapsed since the most recent successful 
FORMAT UNIT command. 

Upon receiving the FORMAT UNIT command, the device server should set all parameters within the Format 
Status log page to indicate that no such information is available. Only upon successful completion of the 
FORMAT UNIT command should the device server update the affected fields. 

The target save disable (tsd) bit in the parameter control byte (see SPC-4) shall always be set to zero to 
indicate that the device server provides an implicit saving frequency. 

NOTE 22 - Removable media device servers may save log page information with the medium in a 
vendor-specific manner and location. 

6.2.4 Non-volatile Cache log page 

The Non-volatile Cache log page (see table 113) indicates the status of battery backup for a non-volatile 
cache. 


Table 113 — Non-volatile Cache log page 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

DS 

SPF 

PAGE CODE (17h) 

1 

SUBPAGE CODE(00h) 

2 

(MSB) 

PAGE LENGTH (n - 3) 


3 


(LSB) 

4 


Non-volatile cache log parameters 


n 
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The page code field is defined in SPC-4 and shall be set to the value defined in table 113. 
The PAGE LENGTH field is defined in SPC-4. 

Table 114 defines the parameter codes. 


Table 114 — Non-volatile Cache log parameters 


Parameter code 

Description 

OOOOh 

Remaining Non-volatile Time 

0001 h 

Maximum Non-volatile Time 

All others 

Reserved 


The Remaining Non-volatile Time parameter has the format shown in table 115. 


Table 115 — Remaining Non-volatile Time parameter data 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

PARAMETER LENGTH (03h) 

1 

(MSB) 

REMAINING NON-VOLATILE TIME 


3 


(LSB) 


The parameter length field shall be set to the value defined in table 115. 
The remaining non-volatile time field is defined in table 116. 


Table 116 — remaining non-volatile time field 


Code 

Description 

00_0000h 

Non-volatile cache is volatile, either permanently or temporarily (e.g., if 
batteries need to be recharged). 

00_0001h 

Non-volatile cache is expected to remain non-volatile for an unknown amount of 
time (e.g., if battery status is unknown) 

00_0002h to FF_FFFEh 

Non-volatile cache is expected to remain non-volatile for the number of minutes 
indicated (e.g., battery-backed random access memory). 

FFFFFFh 

Non-volatile cache is indefinitely non-volatile. 


The Maximum Non-volatile Time parameter has the format shown in table 117. 


Table 117 — Maximum Non-volatile Time parameter data 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

PARAMETER LENGTH (03h) 

1 

(MSB) 

MAXIMUM NON-VOLATILE TIME 


3 


(LSB) 


The parameter length field shall be set to the value defined in table 117. 
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The maximum non-volatile time field is defined in table 118. 


Table 118 — maximum non-volatile time field 


Code 

Description 

00_0000h 

Non-volatile cache is volatile 

00_0001h 

Reserved 

00_0002h to FF_FFFEh 

Non-volatile cache is capable of being non-volatile for the estimated number of 
minutes indicated. If the time is based on batteries, it shall be based on the last 
full charge capacity rather than the design capacity of the batteries. 

FFFFFFh 

Non-volatile cache is indefinitely non-volatile. 


6.3 Mode parameters 

6.3.1 Mode parameters overview 

This subclause defines the block descriptors and mode pages used with direct-access block devices. 

The mode parameter list, including the mode parameter header, is described in SPC-4. Direct-access block 
devices support zero or one mode parameter block descriptors (i.e., the block descriptor is shared by all the 
logical blocks on the medium). 

The medium type field in the mode parameter header (see SPC-4) shall be set to OOh. 

The device-specific parameter field in the mode parameter header (see SPC-4) is defined for direct-access 
block devices in table 119. 


Table 119 — device-specific parameter field for direct-access block devices 


Bit 

7 

6 5 

4 

3 

2 1 

° 


WP 

Reserved 

DPOFUA 

Reserved 


When used with the MODE SELECT command, the write protect (wp) bit is not defined. 

When used with the MODE SENSE command, a wp bit set to one indicates that the medium is 
write-protected. A wp bit set to zero indicates that the medium is not write-protected. When the software write 
protect (swp) bit in the Control mode page (see SPC-4) is set to one, the wp bit shall be set to one. When the 
swp bit in the Control mode page is set to zero, the wp bit shall be set to one if the medium is write-protected 
(e.g., due to mechanisms outside the scope of this standard) or zero if the medium is not write-protected. 

When used with the MODE SELECT command, the dpofua bit is reserved. 

When used with the MODE SENSE command, a dpofua bit set to zero indicates that the device server does 
not support the dpo and fua bits. When used with the MODE SENSE command, a dpofua bit set to one 
indicates that the device server supports the dpo and fua bits (see 4.11). 
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The mode page codes and subpage codes for direct-access block devices are shown in table 120. 

Table 120 — Mode page codes for direct-access block devices 


Mode page code 

Description 

Reference 

OOh 

Vendor-specific (does not require page format) 

OOh to 3Eh/FFh 

Return all subpages a 

SPC-4 

Olh 

Read-Write Error Recovery mode page 

6.3.5 

02 h 

Disconnect-Reconnect mode page 

SPC-4 

03h 

Obsolete (Format Device mode page) 

04 h 

Obsolete (Rigid Disk Geometry mode page) 

05h 

Obsolete (Flexible Disk mode page) 

06 h 

Reserved 

07h 

Verify Error Recovery mode page 

6.3.6 

08h 

Caching mode page 

6.3.4 

09h 

Obsolete 

OAh/OOh 

Control mode page 

SPC-4 

OAh/Olh 

Control Extension mode page 

SPC-4 

0Ah/02h to 3Eh 

Reserved 

OBh 

Obsolete (Medium Types Supported mode page) 

OCh 

Obsolete (Notch And Partition mode page) 

ODh 

Obsolete 

OEh to OFh 

Reserved 

lOh 

XOR Control mode page 

6.3.7 

11 h to 13h 

Reserved 

14h 

Enclosure Services Management mode page b 

SES-2 

15h to 17h 

Reserved 

18h 

Protocol-Specific LUN mode page 

SPC-4 

19h 

Protocol-Specific Port mode page 

SPC-4 

1Ah 

Power Condition mode page 

SPC-4 

IBh 

Reserved 

ICh/OOh 

Informational Exceptions Control mode page 

SPC-4 

ICh/Olh 

Background Control mode page 

6.3.3 

IDh to IFh 

Reserved 

20h to 3Eh 

Vendor-specific (does not require page format) 

3Fh/00h 

Return all mode pages a 

SPC-4 

3Fh/01h to 3Eh 

Reserved 

3Fh/FFh 

Return all mode pages and subpages a 

SPC-4 

a Valid only for the MODE SENSE command 


b Valid only if the encserv bit is set to one in the standard INQUIRY data (see SPC-4) 
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6.3.2 Mode parameter block descriptors 

6.3.2.1 Mode parameter block descriptors overview 

If the device server returns a mode parameter block descriptor, it shall return a short LBA mode parameter 
block descriptor (see 6.3.2.2) in the mode parameter data in response to: 

a) a MODE SENSE (6) command; or 

b) a MODE SENSE (10) command with the llbaa bit set to zero. 

If the device server returns a mode parameter block descriptor and the number of logical blocks is greater 
than FFFF_FFFFh, it may return a long LBA mode parameter block descriptor (see 6.3.2.3) in the mode 
parameter data in response to a MODE SENSE (10) command with the llbaa bit set to one. 

If the application client sends a mode parameter block descriptor in the mode parameter list, it shall send a 
short LBA mode parameter block descriptor (see 6.3.2.2) for a MODE SELECT (6) command. 

If the application client sends a mode parameter block descriptor in the mode parameter list, it may send a 
long LBA mode parameter block descriptor (see 6.3.2.3) for a MODE SELECT (10) command. 

Support for the mode parameter block descriptors is optional. The device server shall establish a unit attention 
condition with the additional sense code set to MODE PARAMETERS CHANGED (see SPC-4 and SAM-4) 
when the block descriptor values are changed. 

6.3.2.2 Short LBA mode parameter block descriptor 

Table 121 defines the block descriptor for direct-access block devices used: 

a) with the MODE SELECT (6) and MODE SENSE (6) commands; and 

b) with the MODE SELECT (10) and MODE SENSE (10) commands when the longlba bit is set to zero 
in the mode parameter header (see SPC-4). 


Table 121 — Short LBA mode parameter block descriptor 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

(MSB) 

3 

(LSB) 

4 

Reserved 

5 

(MSB) 

LOGICAL BLOCK LENGTH 

7 

(LSB) 


A device server shall respond to a MODE SENSE command (see SPC-4) by reporting the number of logical 
blocks specified in the number of logical blocks field sent in the last MODE SELECT command that 
contained a mode parameter block descriptor. If no MODE SELECT command with a mode parameter block 
descriptor has been received then the current number of logical blocks shall be returned. To determine the 
number of logical blocks at which the logical unit is currently formatted, the application client shall use the 
READ CAPACITY command (see 5.13) rather than the MODE SENSE command. 

On a MODE SENSE command, the device server may return a value of zero indicating that it does not report 
the number of logical blocks in the short LBA mode parameter block descriptor. 

On a MODE SENSE command, if the number of logical blocks on the medium exceeds the maximum value 
that is able to be specified in the number of logical blocks field, the device server shall return a value of 
FFFFFFFFh. 

If the logical unit does not support changing its capacity by changing the number of logical blocks field 
using the MODE SELECT command (see SPC-4), the value in the number of logical blocks field is ignored. 
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If the device supports changing its capacity by changing the number of logical blocks field, then the 
number of logical blocks field is interpreted as follows: 

a) If the number of logical blocks field is set to zero, the logical unit shall retain its current capacity if 
the logical block length has not changed. If the number of logical blocks field is set to zero and the 
content of the logical block length field (i.e., new logical block length) is different than the current 
logical block length, the logical unit shall be set to its maximum capacity when the new logical block 
length takes effect (i.e., after a successful FORMAT UNIT command); 

b) If the number of logical blocks field is greater than zero and less than or equal to its maximum 
capacity, the logical unit shall be set to that number of logical blocks. If the content of the logical 
block length field is the same as the current logical block length, the logical unit shall not become 
format corrupt. This capacity setting shall be retained through power cycles, hard resets, logical unit 
resets, and l_T nexus losses. If the content of the logical block length field is the same as the 
current logical block length this capacity setting shall take effect on successful completion of the 
MODE SELECT command. If the content of the logical block length field (i.e., new logical block 
length) is different than the current logical block length this capacity setting shall take effect when the 
new logical block length takes effect (i.e., after a successful FORMAT UNIT command); 

c) If the number of logical blocks field is set to a value greater than the maximum capacity of the 
device and less than FFFF_FFFFh, then the MODE SELECT command shall be terminated with 
CHECK CONDITION status with the sense key set to ILLEGAL REOUEST and the additional sense 
code set to INVALID FIELD IN PARAMETER LIST. The logical unit shall retain its previous logical 
block descriptor settings; or 

d) If the NUMBER of LOGICAL blocks field is set to FFFF_FFFFh, the logical unit shall be set to its 
maximum capacity. If the content of the logical block length field is the same as the current logical 
block length, the logical unit shall not become format corrupt. This capacity setting shall be retained 
through power cycles, hard resets, logical unit resets, and l_T nexus losses. If the content of the 
logical block length field is the same as the current logical block length this capacity setting shall 
take effect on successful completion of the MODE SELECT command. If the content of the logical 
block length field (i.e., new logical block length) is different than the current logical block length this 
capacity setting shall take effect when the new logical block length takes effect (i.e., after a successful 
FORMAT UNIT command). 

The logical block length field specifies the length in bytes of each logical block. No change shall be made 
to any logical blocks on the medium until a format operation (see 5.2) is initiated by an application client. 

A device server shall respond to a MODE SENSE command (see SPC-4) by reporting the length of the logical 
blocks as specified in the logical block length field sent in the last MODE SELECT command that 
contained a mode parameter block descriptor. If no MODE SELECT command with a block descriptor has 
been received then the current logical block length shall be returned (e.g., if the logical block length is 512 
bytes and a MODE SELECT command occurs with the logical block length field set to 520 bytes, any 
MODE SENSE commands would return 520 in the logical block length field). To determine the logical 
block length at which the logical unit is currently formatted, the application client shall use the READ 
CAPACITY command (see 5.13) rather than the MODE SELECT command. 
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6.3.2.3 Long LBA mode parameter block descriptor 

Table 122 defines the block descriptor for direct-access block devices used with the MODE SELECT (10) 
command and MODE SENSE (10) command when the longlba bit is set to one in the mode parameter 
header (see SPC-4). 


Table 122 — Long LBA mode parameter block descriptor 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

(MSB) 

NUMBER OF LOGICAL BLOCKS 


7 


(LSB) 

8 


Reserved 


11 



12 

(MSB) 

LOGICAL BLOCK LENGTH 


15 


(LSB) 


A device server shall respond to a MODE SENSE command (see SPC-4) by reporting the number of logical 
blocks specified in the number of logical blocks field sent in the last MODE SELECT command that 
contained a mode parameter block descriptor. If no MODE SELECT command with a mode parameter block 
descriptor has been received then the current number of logical blocks shall be returned. To determine the 
number of logical blocks at which the logical unit is currently formatted, the application client shall use the 
READ CAPACITY command (see 5.13) rather than the MODE SENSE command. 

On a MODE SENSE command, the device server may return a value of zero indicating that it does not report 
the number of logical blocks in the long LBA mode parameter block descriptor. 

If the logical unit does not support changing its capacity by changing the number of logical blocks field 
using the MODE SELECT command (see SPC-4), the value in the number of logical blocks field is ignored. 
If the device supports changing its capacity by changing the number of logical blocks field, then the 
number of logical blocks field is interpreted as follows: 

a) If the number of logical blocks field is set to zero, the logical unit shall retain its current capacity if 
the logical block length has not changed. If the number of logical blocks field is set to zero and the 
content of the logical block length field (i.e., new logical block length) is different than the current 
logical block length, the logical unit shall be set to its maximum capacity when the new logical block 
length takes effect (i.e., after a successful FORMAT UNIT command); 

b) If the number of logical blocks field is greater than zero and less than or equal to its maximum 
capacity, the logical unit shall be set to that number of logical blocks. If the content of the logical 
block length field is the same as the current logical block length, the logical unit shall not become 
format corrupt. This capacity setting shall be retained through power cycles, hard resets, logical unit 
resets, and I T nexus losses. If the content of the logical block length field is the same as the 
current logical block length this capacity setting shall take effect on successful completion of the 
MODE SELECT command. If the content of the logical block length field (i.e., new logical block 
length) is different than the current logical block length this capacity setting shall take effect when the 
new logical block length takes effect (i.e., after a successful FORMAT UNIT command); 

c) If the number of logical blocks field is set to a value greater than the maximum capacity of the 
device and less than FFFF_FFFF_FFFF_FFFFh, then the device server shall terminate the MODE 
SELECT command with CHECK CONDITION status with the sense key set to ILLEGAL REOUEST 
and the additional sense code set to INVALID FIELD IN PARAMETER LIST. The logical unit shall 
retain its previous block descriptor settings; or 

d) If the number of logical blocks field is set to FFFF_FFFF_FFFF_FFFFh, the logical unit shall be set 
to its maximum capacity. If the content of the logical block length field is the same as the current 
logical block length, the logical unit shall not become format corrupt. This capacity setting shall be 
retained through power cycles, hard resets, logical unit resets, and I T nexus losses. If the content of 
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the logical block length field is the same as the current logical block length this capacity setting 
shall take effect on successful completion of the MODE SELECT command. If the content of the 
logical block length field (i.e., new logical block length) is different than the current logical block 
length this capacity setting shall take effect when the new logical block length takes effect (i.e., after a 
successful FORMAT UNIT command). 

The logical block length field specifies the length in bytes of each logical block. No change shall be made 
to any logical blocks on the medium until a format operation (see 5.2) is initiated by an application client. 

A device server shall respond to a MODE SENSE command (see SPC-4) by reporting the length of the logical 
blocks as specified in the logical block length field sent in the last MODE SELECT command that 
contained a mode parameter block descriptor. If no MODE SELECT command with a block descriptor has 
been received then the current logical block length shall be returned (e.g., if the logical block length is 512 
bytes and a MODE SELECT command occurs with the logical block length field set to 520 bytes, any 
MODE SENSE commands would return 520 in the logical block length field). To determine the logical 
block length at which the logical unit is currently formatted, the application client shall use the READ 
CAPACITY command (see 5.13) rather than the MODE SELECT command. 

6.3.3 Background Control mode page 

The Background Control mode page (see table 123) is a subpage of the Informational Exception Control 
mode page (see SPC-4) and provides controls over background operations. The mode page policy (see 
SPC-4) for this subpage shall be shared. 


Table 123 — Background Control mode page 


Bit 

Byte 

7 

6 

5 4 3 2 1 

0 

0 

PS 

SPF (1b) 

PAGE CODE (ICh) 

1 

SUBPAGE CODE(01h) 

2 

(MSB) 

PAGE LENGTH (OOOCh) 


3 


(LSB) 

4 

Reserved s_l_full lowir 

EN_BMS 

5 

Reserved 

EN_PS 

6 

(MSB) 

BACKGROUND MEDIUM SCAN INTERVAL TIME 


7 


(LSB) 

8 

(MSB) 

BACKGROUND PRE-SCAN TIME LIMIT 


9 


(LSB) 

10 

(MSB) 

MINIMUM IDLE TIME BEFORE BACKGROUND SCAN 


11 


(LSB) 

12 

(MSB) 

MAXIMUM TIME TO SUSPEND BACKGROUND SCAN 


13 


(LSB) 

14 


Reserved 


15 




The parameters savable (PS) bit is only used with the MODE SENSE command. This bit is reserved with the 
MODE SELECT command. A ps bit set to one indicates that the device server is capable of saving the mode 
page in a non-volatile vendor-specific location. If the ps is set to one in MODE SENSE data then the mode 
page shall be savable by issuing a MODE SELECT command with the sp bit set to one. 
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A spf bit set to one indicates that the sub_page mode page format is being used (see SPC-4). 

The page code field, subpage code field, and page length field are defined in SPC-4 and shall be set to the 
values defined in table 123. 

A suspend on log full (s_l_full) bit set to zero specifies that the device server shall continue running a 
background scan even if the Background Scan Results log page contains the maximum number of log 
parameters supported by the logical unit. A s_l_full bit set to one specifies that the device server shall 
suspend a background scan if the Background Scan Results log page contains the maximum number of log 
parameters supported by the logical unit. 

A log only when intervention required (lowir) bit set to zero specifies that the device server shall log all 
suspected medium errors in the Background Scan Results log page (see 6.2.2). A lowir bit set to one 
specifies that the device server shall only log medium errors requiring application client intervention in the 
Background Scan Results log page as defined in 6.2.2. 

An enable pre-scan (en_ps) bit set to zero specifies that background pre-scan shall be disabled. If a 
background pre-scan operation is in progress when en_ps is changed from a one to a zero, then the 
background pre-scan operation shall be halted before completion of the MODE SELECT command. An en_ps 
bit set to one specifies that a background pre-scan operation shall be started after the next power on. Once 
this background pre-scan has completed, another background pre-scan shall not occur unless the en_ps bit is 
set to zero, then set to one, and another power on occurs. 

An enable background medium scan (en_bms) bit set to zero specifies that background medium scan shall be 
disabled. An en_bms bit set to one specifies that background medium scan shall be enabled. If the en_ps bit is 
also set to one then a background medium scan operation shall not start until after the background pre-scan 
operation is halted or completed. If a background medium scan is in progress when the en_bms bit is changed 
from one to zero, then the background medium scan shall be suspended before completing the MODE 
SELECT command and remain suspended until the en_bms bit is set to one, at which time the background 
medium scan shall resume from the suspended location. 

The background medium scan interval time field specifies the minimum time, in hours, between the start of 
one background pre-scan or background medium scan operation and the start of the next background 
medium scan operation. If the current background medium scan operation takes longer than the value 
specified in the background medium scan interval time field, then the current background pre-scan or 
background medium scan continues until completion and the next background medium scan operation starts 
on completion of the current background pre-scan or background medium scan. 

The background pre-scan time limit field specifies the maximum time, in hours, for a background pre-scan 
operation to complete. If the background pre-scan operation does not complete within the specified time then 
it is halted. A value of zero specifies an unlimited timeout value. 

The minimum idle time before background scan field specifies the time, in milliseconds, that the logical unit 
shall be idle before resuming a background pre-scan ora background medium scan. 

The maximum time to suspend background scan field specifies the time, in milliseconds, that the logical unit 
should take to start processing a command received while it is performing a background pre-scan or a 
background medium scan. 
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6.3.4 Caching mode page 

The Caching mode page (see table 124) defines the parameters that affect the use of the cache. 


Table 124 — Caching mode page 


Bit 

Byte 

7 6 5 4 3 2 1 0 

0 

PS SPF (Ob) PAGE CODE (08h) 

1 

PAGE LENGTH (12h) 

2 

IC ABPF CAP DISC SIZE WCE MF RCD 

3 

DEMAND READ RETENTION PRIORITY WRITE RETENTION PRIORITY 

4 

(MSB) 

5 

(LSB) 

6 

(MSB) 

7 

(LSB) 

8 

(MSB) 

MAXIMUM PRE-FETCH 

9 

(LSB) 

10 

(MSB) 

MAXIMUM PRE-FETCH CEILING 

11 

. . (LSB) 

12 

fsw lbcss dra Vendor-specific Reserved nv_dis 

13 

NUMBER OF CACHE SEGMENTS 

14 

(MSB) 

CACHE SEGMENT SIZE 

15 

(LSB) 

16 

Reserved 

17 

Obsolete 

19 



The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with the 
MODE SELECT command. A ps bit set to one indicates that the device server is capable of saving the mode 
page in a non-volatile vendor-specific location. If the ps is set to one in MODE SENSE data then the mode 
page shall be savable by issuing a MODE SELECT command with the sp bit set to one. 

The SubPage Format (spf) bit, page code field, and page length field are defined in SPC-4 and shall be set 
to the values defined in table 124. 

An initiator control (ic) enable bit set to one specifies that the device server use one of the following fields to 
control the caching algorithm rather than the device server’s own adaptive algorithm: 

a) the NUMBER OF CACHE segments field, if the SIZE bit is set to zero; or 

b) the CACHE segment size field, if the size bit is set to one. 

An abort pre-fetch (abpf) bit set to one when the dra bit is set to zero specifies that the device server abort a 
pre-fetch upon receipt of a new command. An abpf bit set to one takes precedence over the value specified in 
the minimum pre-fetch field. An abpf bit set to zero when the dra bit set to zero specifies that the termination 
of any active pre-fetch is dependent upon Caching mode page bytes 4 through 11 and is vendor-specific. 

A caching analysis permitted (cap) bit set to one specifies that the device server perform caching analysis 
during subsequent operations. A cap bit set to zero specifies that caching analysis be disabled (e.g., to reduce 
overhead time or to prevent nonpertinent operations from impacting tuning values). 
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A discontinuity (disc) bit set to one specifies that the device server continue the pre-fetch across time 
discontinuities (e.g., across cylinders) up to the limits of the buffer, or segment, space available for the 
pre-fetch. A disc bit set to zero specifies that pre-fetches be truncated or wrapped at time discontinuities. 

A size enable (size) bit set to one specifies that the cache segment size field be used to control caching 
segmentation. A size bit set to zero specifies that the number of cache segments field be used to control 
caching segmentation. Simultaneous use of both the number of segments and the segment size is 
vendor-specific. 

A writeback cache enable (wce) bit set to zero specifies that the device server shall complete a WRITE 
command with GOOD status only after writing all of the data to the medium without error. A wce bit set to one 
specifies that the device server may complete a WRITE command with GOOD status after receiving the data 
without error and prior to having written the data to the medium. 

A multiplication factor (mf) bit set to zero specifies that the device server shall interpret the minimum pre-fetch 
field and the maximum pre-fetch field in terms of the number of logical blocks for each of the respective types 
of pre-fetch. An mf bit set to one specifies that the device server shall interpret the minimum pre-fetch field 
and the maximum pre-fetch field to be specified in terms of a scalar number that, when multiplied by the 
number of logical blocks to be transferred for the current command, yields the number of logical blocks for 
each of the respective types of pre-fetch. 

A read cache disable (rcd) bit set to zero specifies that the device server may return data requested by a 
READ command by accessing either the cache or medium. A rcd bit set to one specifies that the device 
server shall transfer all of the data requested by a READ command from the medium (i.e., data shall not be 
transferred from the cache). 

The demand read retention priority field (see table 125) specifies the retention priority the device server 
should assign for data read into the cache that has also been transferred to the data-in buffer. 


Table 125 — demand read retention priority field 


Code 

Description 

Oh 

The device server should not distinguish between retaining the indicated data and data placed 
into the cache by other means (e.g., pre-fetch). 

1h 

The device server should replace data put into the cache via a READ command sooner (i.e., 
read data has lower priority) than data placed into the cache by other means (e.g., pre-fetch). 

2h to Eh 

Reserved 

Fh 

The device server should not replace data put into the cache via a READ command if there is 
other data in the cache that was placed into the cache by other means (e.g., pre-fetch) and the 
data in the cache may be replaced. 
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The write retention priority field (see table 126) specifies the retention priority the device server should 
assign for data written into the cache that has also been transferred from the cache to the medium. 


Table 126 — write retention priority field 


Code 

Description 

Oh 

The device server should not distinguish between retaining the indicated data and data placed 
into the cache by other means (e.g., pre-fetch). 

1h 

The device server should replace data put into the cache during a WRITE command or a 

WRITE AND VERIFY command sooner (i.e., has lower priority) than data placed into the cache 
by other means (e.g., pre-fetch). 

2h to Eh 

Reserved 

Fh 

The device server should not replace data put into the cache during a WRITE command or a 
WRITE AND VERIFY command if there is other data in the cache that was placed into the 
cache by other means (e.g., pre-fetch) and the data in the cache may be replaced. 


An anticipatory pre-fetch occurs when data is placed in the cache that has not been requested. This may 
happen in conjunction with the reading of data that has been requested. The disable pre-fetch transfer 
length field, the minimum pre-fetch field, the maximum pre-fetch field, and the maximum pre-fetch ceiling 
field give an indication to the device server how it should manage the cache based on the most recent READ 
command. An anticipatory pre-fetch may occur based on other information. These fields are only 
recommendations to the device server and should not cause a CHECK CONDITION to occur if the device 
server is not able to satisfy the request. 

The disable pre-fetch transfer length field specifies the selective disabling of anticipatory pre-fetch on 
long transfer lengths. The value in this field is compared to the transfer length requested by a READ 
command. If the transfer length is greater than the disable pre-fetch transfer length, then an anticipatory 
pre-fetch is not done for the command. Otherwise the device server should attempt an anticipatory pre-fetch. 
If the disable pre-fetch transfer length field is set to zero, then all anticipatory pre-fetching is disabled for 
any request for data, including those with a transfer length of zero. 

The minimum pre-fetch field specifies the number of logical blocks to pre-fetch regardless of the delays it 
might cause in processing subsequent commands. The field contains either: 

a) a number of logical blocks, if the mf bit is set to zero; or 

b) a scalar multiplier of the value in the transfer length field, if the mf bit is set to one. 

The pre-fetching operation begins at the logical block after the last logical block of a READ command. 
Pre-fetching shall always halt when it reaches the last logical block on the medium. Errors that occur during 
the pre-fetching operation shall not be reported to the application client unless the device server is unable to 
process subsequent commands correctly as a result of the error. In this case the error may be reported either 
as an error for that subsequent command, or as a deferred error, at the discretion of the device server and 
according to the rules for reporting deferred errors (see SPC-4). 

If the pre-fetch has read more than the amount of data specified by the minimum pre-fetch field, then 
pre-fetching should be terminated whenever another command enters the enabled state (see SAM-4). This 
requirement is ignored when the minimum pre-fetch field value is equal to the maximum pre-fetch field value. 

The maximum pre-fetch field specifies the number of logical blocks to pre-fetch if the pre-fetch does not delay 
processing of subsequent commands. The field contains either: 

a) a number of logical blocks, if the mf bit is set to zero; or 

b) a scalar multiplier of the value in the transfer length field, if the mf bit is set to one. 

The maximum pre-fetch field contains the maximum amount of data to pre-fetch as a result of one READ 
command. It is used in conjunction with the disable pre-fetch transfer length field and maximum pre¬ 
fetch ceiling field to trade off pre-fetching new data with displacing old data already stored in the cache. 
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The maximum pre-fetch ceiling field specifies an upper limit on the number of logical blocks computed as the 
maximum pre-fetch. If this number of logical blocks is greater than the value in the maximum pre-fetch field, 
then the number of logical blocks to pre-fetch shall be truncated to the value stored in the maximum pre-fetch 
ceiling field. 

NOTE 23 - If the mf bit is set to one the maximum pre-fetch ceiling field is useful in limiting the amount of 
data to be pre-fetched. 

A force sequential write (fsw) bit set to one specifies that, for commands writing to more than one logical 
block, the device server shall write the logical blocks to the medium in ascending sequential order. An fsw bit 
set to zero specifies that the device server may reorder the sequence of writing logical blocks (e.g., in order to 
achieve faster command completion). 

A logical block cache segment size (lbcss) bit set to one specifies that the cache segment size field units 
shall be interpreted as logical blocks. An lbcss bit set to zero specifies that the cache segment size field units 
shall be interpreted as bytes. The lbcss shall not impact the units of other fields. 

A disable read-ahead (dra) bit set to one specifies that the device server shall not read into the pre-fetch 
buffer any logical blocks beyond the addressed logical block(s). A dra bit set to zero specifies that the device 
server may continue to read logical blocks into the pre-fetch buffer beyond the addressed logical block(s). 

The number of cache segments field specifies the number of segments into which the device server shall 
divide the cache. 

The cache segment size field specifies the segment size in bytes if the lbcss bit is set to zero or in logical 
blocks if the lbcss bit is set to one. The cache segment size field is valid only when the size bit is set to one. 

An nv_dis bit set to one specifies that the device server shall disable a non-volatile cache and indicates that a 
non-volatile cache is supported but disabled. An nv_dis bit set to zero specifies that the device server may 
use a non-volatile cache and indicates that a non-volatile cache may be present and enabled. 
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6.3.5 Read-Write Error Recovery mode page 

The Read-Write Error Recovery mode page (see table 127) specifies the error recovery parameters the 
device server shall use during any command that performs a read or write operation to the medium (e.g., 
READ command, WRITE command, or a WRITE AND VERIFY command). 


Table 127 — Read-Write Error Recovery mode page 


Bit 

Byte 

7 

6 

5 

4 

3 2 10 

0 

PS 

SPF (Ob) 

PAGE CODE (01 h) 

1 

PAGE LENGTH (OAh) 

2 

AWRE 

ARRE 

TB 

RC 

Error recovery bits 

EER PER DTE DCR 

3 

READ RETRY COUNT 

4 

Obsolete 

5 

Obsolete 

6 

Obsolete 

7 

Reserved Restricted for MMC-6 

8 

WRITE RETRY COUNT 

9 

Reserved 

10 

(MSB) 

RECOVERY 

TIME LIMIT 

11 


(LSB) 


The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with the 
MODE SELECT command. A ps bit set to one indicates that the device server is capable of saving the mode 
page in a non-volatile vendor-specific location. 

The SubPage Format (spf) bit, page code field, and page length field are defined in SPC-4 and shall be set 
to the values defined in table 127. 

An automatic write reallocation enabled (awre) bit set to zero specifies that the device server shall not 
perform automatic reallocation of defective logical blocks during write operations. 

An awre bit set to one specifies that the device server shall enable automatic reallocation of defective logical 
blocks during write operations. The automatic reallocation shall be performed only if the device server has the 
valid data (e.g., original data in a buffer or recovered from the medium). The valid data shall be placed in the 
reallocated logical block. The device server shall report any failures that occur during the reallocation 
operation. Error reporting as specified by the error recovery bits (i.e., the eer bit, the per bit, the dte bit, and 
the dcr bit) shall be performed only after completion of the reallocation. See the REASSIGN BLOCKS 
command (see 5.18) for error procedures. 

An automatic read reallocation enabled (arre) bit set to zero specifies that the device server shall not perform 
automatic reallocation of defective logical blocks during read operations. 

An arre bit set to one specifies that the device server shall enable automatic reallocation of defective logical 
blocks during read operations. All error recovery actions required by the error recovery bits (i.e., the eer bit, 
the per bit, the dte bit, and the dcr bit) shall be processed. The automatic reallocation shall then be 
performed only if the device server successfully recovers the data. The recovered data shall be placed in the 
reallocated logical block. The device server shall report any failures that occur during the reallocation 
operation. Error reporting as specified by the error recovery bits (i.e., the eer bit, the per bit, the dte bit, and 
the dcr bit) shall be performed only after completion of the reallocation operation. See the REASSIGN 
BLOCKS command (see 5.18) for error procedures. 
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A transfer block (tb) bit set to zero specifies that if an unrecovered read error occurs during a read operation, 
then the device server shall not transfer any data for the logical block to the data-in buffer. A tb bit set to one 
specifies that if an unrecovered read error occurs during a read operation, then the device server shall 
transfer pseudo read data before returning CHECK CONDITION status. The data returned in this case is 
vendor-specific. The tb bit does not affect the action taken for recovered read errors. 

A read continuous (rc) bit set to zero specifies that error recovery operations that cause delays during the 
data transfer are acceptable. Data shall not be fabricated. 

An rc bit set to one specifies the device server shall transfer the entire requested length of data without 
adding delays during the data transfer to perform error recovery procedures. The device server may transfer 
pseudo read in order to maintain a continuous flow of data. The device server shall assign priority to the rc bit 
over conflicting bits within this byte. 

NOTE 24 - The RC bit may be set to one in image processing, audio, or video applications. 

An enable early recovery (eer) bit set to one specifies that the device server shall use the most expedient 
form of error recovery first. An eer bit set to zero specifies that the device server shall use an error recovery 
procedure that minimizes the risk of error mis-detection or mis-correction. This bit only applies to data error 
recovery and it does not affect positioning retries. 

NOTE 25 - An eer bit set to one may imply an increase in the probability of error mis-detection or 
mis-correction. An eer bit set to zero allows the specified retry limit to be exhausted prior to using additional 
information (e.g., ECC bytes) to correct the error. 

A post error (per) bit set to one specifies that if a recovered read error occurs during a command performing a 
read or write operation, then the device server shall terminate the command with CHECK CONDITION status 
with the sense key set to RECOVERED ERROR. A per bit set to zero specifies that if a recovered read error 
occurs during a command performing a read or write operation, then the device server shall terminate the 
command with CHECK CONDITION status, and shall perform error recovery procedures within the limits 
established by the error recovery parameters. If the dte bit is set to one, then the per bit shall be set to one. 

A data terminate on error (dte) bit set to one specifies that the device server shall terminate the data-in or 
data-out buffer transfer of a command performing a read or write operation upon detection of a recovered 
error. A dte bit set to zero specifies that the device server shall not terminate the data-in or data-out buffer 
transfer of a command performing a read or write operation upon detection of a recovered error. 

A disable correction (dcr) bit set to one specifies that additional information (e.g., ECC bytes) (see 4.4) shall 
not be used for data error recovery. A dcr bit set to zero allows the use of additional information (e.g., ECC 
bytes) for data error recovery. If the eer bit is set to one, the dcr bit shall be set to zero. 
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The combinations of the error recovery bits (i.e., the eer bit, the per bit, the dte bit, and the dcr bit) are 
explained in table 128. 


Table 128 — Combined error recovery bit descriptions (part 1 of 4) 


EER 

PER 

DTE 

DCR 

Description 

0 

0 

0 

0 

The device server shall perform the full number of retries as specified in the read 
retry count field for read operations, the write retry count field for write 
operations, and the verify retry count field (see 6.3.6) for verify operations and 
shall perform error correction in an attempt to recover the data. 

The device server shall not report recovered read errors. The device server shall 
terminate a command performing a read or write operation with CHECK 

CONDITION status before the transfer count is exhausted only if an unrecovered 
error is detected. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

0 

0 

0 

1 

The device server shall perform the full number of retries as specified in the read 
retry count field for read operations, the write retry count field for write 
operations, and the verify retry count field (see 6.3.6) for verify operations but 
shall not perform error correction in an attempt to recover the data. 

The device server shall not report recovered read errors. The device server shall 
terminate a command performing a read or write operation with CHECK 

CONDITION status before the transfer count is exhausted only if an unrecovered 
error is detected. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

0 

0 

1 

0 

Invalid mode. The per bit shall be set to one if the dte bit is set to one. a 

0 

0 

1 

1 

a If an invalid combination of the error recovery bits is sent by the application client, then the device 
server shall terminate the MODE SELECT command with CHECK CONDITION status with the sense 
key set to ILLEGAL RECUEST and the additional sense code set to INVALID FIELD IN PARAMETER 
LIST 
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Table 128 — Combined error recovery bit descriptions (part 2 of 4) 


EER 

PER 

DTE 

DCR 

Description 

0 

1 

0 

0 

The device server shall perform the full number of retries as specified in the read 
retry count field for read operations, the write retry count field for write 
operations, and the verify retry count field (see 6.3.6) for verify operations and 
shall perform error correction in an attempt to recover the data. 

The device server shall terminate a command performing a read or write operation 
with CHECK CONDITION status before the transfer count is exhausted only if an 
unrecovered error is detected. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

If a recovered error occurs while the device server is performing a read or write 
operation, then, after the operation is complete, the device server shall terminate 
the command with CHECK CONDITION status with the sense key set to 
RECOVERED ERROR. The information field in the sense data shall contain the 
LBA of the last recovered error that occurred during the command. 

0 

1 

0 

1 

The device server shall perform the full number of retries as specified in the read 
retry count field for read operations, the write retry count field for write 
operations, and the verify retry count field (see 6.3.6) for verify operations but 
shall not perform error correction in an attempt to recover the data. 

The device server shall terminate a command performing a read or write operation 
with CHECK CONDITION status before the transfer count is exhausted only if an 
unrecovered error is detected. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

If a recovered error occurs while the device server is performing a read or write 
operation, then, after the operation is complete, the device server shall terminate 
the command with CHECK CONDITION status with the sense key set to 
RECOVERED ERROR. The information field in the sense data shall contain the 
LBA of the last recovered error that occurred during the command. 

a If an invalid combination of the error recovery bits is sent by the application client, then the device 
server shall terminate the MODE SELECT command with CHECK CONDITION status with the sense 
key set to ILLEGAL RECUEST and the additional sense code set to INVALID FIELD IN PARAMETER 
LIST. 
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Table 128 — Combined error recovery bit descriptions (part 3 of 4) 


EER 

PER 

DTE 

DCR 

Description 

0 

1 

1 

0 

The device server shall perform the full number of retries as specified in the read 
retry count field for read operations, the write retry count field for write 
operations, and the verify retry count field (see 6.3.6) for verify operations and 
shall perform error correction in an attempt to recover the data. 

The device server shall terminate a command performing a read or write operation 
with CHECK CONDITION status before the transfer count is exhausted if any 
error, either recovered or unrecovered, is detected. The information field in the 
sense data shall contain the LBA of error. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

0 

1 

1 

1 

The device server shall perform the full number of retries as specified in the read 
retry count field for read operations, the write retry count field for write 
operations, and the verify retry count field (see 6.3.6) for verify operations but 
shall not perform error correction in an attempt to recover the data. 

The device server shall terminate a command performing a read or write operation 
with CHECK CONDITION status before the transfer count is exhausted if any 
error, either recovered or unrecovered, is detected. The information field in the 
sense data shall contain the LBA of the error. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

1 

0 

0 

0 

The device server shall perform the fewest possible number of retries and perform 
error correction in an attempt to recover the data. 

The device server shall not report recovered errors. The device server shall 
terminate a command performing a read or write operation with CHECK 

CONDITION status before the transfer count is exhausted only if an unrecovered 
error is detected. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

1 

0 

0 

1 

Invalid mode. The dcr bit shall be set to zero if the eer bit is set to one. a 

1 

0 

1 

0 

Invalid mode. The per bit shall be set to one if the dte bit is set to one. a 

1 

0 

1 

1 

a If an invalid combination of the error recovery bits is sent by the application client, then the device 
server shall terminate the MODE SELECT command with CHECK CONDITION status with the sense 
key set to ILLEGAL RECUEST and the additional sense code set to INVALID FIELD IN PARAMETER 
LIST. 
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Table 128 — Combined error recovery bit descriptions (part 4 of 4) 


EER 

PER 

DTE 

DCR 

Description 

1 

1 

0 

0 

The device server shall perform the fewest possible number of retries and perform 
error correction in an attempt to recover the data. 

The device server shall terminate a command performing a read or write operation 
with CHECK CONDITION status before the transfer count is exhausted only if an 
unrecovered error is detected. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

If a recovered error occurs while the device server is performing a read or write 
operation, then, after the operation is complete, the device server shall terminate 
the command with CHECK CONDITION status with the sense key set to 
RECOVERED ERROR. The information field in the sense data shall contain the 
LBA of the last recovered error that occurred during the command. 

1 

1 

0 

1 

Invalid mode. The dcr bit shall be set to zero if the eer bit is set to one. a 

1 

1 

1 

0 

The device server shall perform the fewest possible number of retries and perform 
error correction in an attempt to recover the data. 

The device server shall terminate a command performing a read or write operation 
with CHECK CONDITION status before the transfer count is exhausted if any 
error, either recovered or unrecovered, is detected. The information field in the 
sense data shall contain the LBA of the error. 

If an unrecovered read error occurs during a read operation, the transfer block (tb) 
bit determines whether the data for the logical block with the unrecovered read 
error is transferred to the data-in buffer. 

1 

1 

1 

1 

Invalid mode. The dcr bit shall be set to zero if the eer bit is set to one. a 

a If an invalid combination of the error recovery bits is sent by the application client, then the device 
server shall terminate the MODE SELECT command with CHECK CONDITION status with the sense 
key set to ILLEGAL RECUEST and the additional sense code set to INVALID FIELD IN PARAMETER 
LIST. 


The read retry count field specifies the number of times that the device server shall attempt its recovery 
algorithm during read operations. 

The write retry count field specifies the number of times that the device server shall attempt its recovery 
algorithm during write operations. 

The recovery time limit field specifies in milliseconds the maximum time duration that the device server shall 
use for data error recovery procedures. The device server may round this value as described in SPC-4. The 
limit in this field specifies the maximum error recovery time allowed for any individual logical block. A 
recovery time limit field set to zero specifies that the device server shall use its default value. 

When both a retry count and a recovery time limit are specified, the field that specifies the recovery action of 
least duration shall have priority. 

NOTE 26 - To disable all types of correction and retries the application client should set the eer bit to zero, 
the per bit to one, the dte bit to one, the dcr bit to one, the READ RETRY COUNT field to OOh, the WRITE 
RETRY COUNT field to OOh, and the RECOVERY TIME LIMIT field to OOOOh. 
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6.3.6 Verify Error Recovery mode page 

The Verify Error Recovery mode page (see table 129) specifies the error recovery parameters the device 
server shall use during the VERIFY command and the verify operation of the WRITE AND VERIFY command. 


Table 129 — Verify Error Recovery mode page 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

PS 

SPF (Ob) 

PAGE CODE (07h) 

1 

PAGE LENGTH (OAh) 

2 

Reserved 

Error recovery bits 

EER PER DTE DCR 

3 

VERIFY RETRY COUNT 

4 

Obsolete 

5 


Reserved 


9 



10 

(MSB) 

VERIFY RECOVERY TIME LIMIT 


11 


(LSB) 


The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with the 
MODE SELECT command. A ps bit set to one indicates that the device server is capable of saving the mode 
page in a non-volatile vendor-specific location. 

The SubPage Format (spf) bit, page code field, and page length field are defined in SPC-4 and shall be set 
to the values defined in table 129. 

The awre bit as defined in the Read-Write Error Recovery mode page (see 6.3.5) applies to the WRITE AND 
VERIFY command. The VERIFY command shall not perform automatic reallocation. 

The eer bit, the per bit, the dte bit, and the dcr bit (i.e., the error recovery bits) are defined in 6.3.5. The 
combinations of these bits are defined in table 128 (see 6.3.5). 

The verify retry count field specifies the number of times that the device server shall attempt its recovery 
algorithm during a verify operation. 

The verify recovery time limit field specifies in milliseconds the maximum time duration that the device 
server shall use error recovery procedures to recover data for an individual logical block. The device server 
may round this value as described in SPC-4. 

When both a retry count and a recovery time limit are specified, the one that requires the least time for data 
error recovery actions shall have priority. 

NOTE 27 - To disable all types of correction and retries the application client should set the eer bit to zero, 
the per bit to one, the dte bit to one, the dcr bit to one, the VERIFY RETRY COUNT field to OOh, and the 
VERIFY RECOVERY TIME LIMIT field to OOOOh. 
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6.3.7 XOR Control mode page 

The XOR Control mode page (see table 130) provides the application client with the means to obtain or 
modify certain XOR operating parameters of the logical unit. 


Table 130 — XOR Control mode page 


Bit 

Byte 

7 

6 

5 

4 

3 

2 

1 

0 

0 

PS 

SPF(0b) 

PAGE CODE (1 Oh) 

1 

PAGE LENGTH (16h) 

2 

Reserved xordis Reserved 

3 

Reserved 

4 

(MSB) 

MAXIMUM XOR WRITE SIZE 


7 


(LSB) 

8 


Reserved 


11 



12 


Obsolete 


19 



20 


Reserved 


21 



22 


Obsolete 


23 




The parameters savable (ps) bit is only used with the MODE SENSE command. This bit is reserved with the 
MODE SELECT command. A ps bit set to one indicates that the device server is capable of saving the mode 
page in a non-volatile vendor-specific location. 

The SubPage Format (spf) bit, page code field, and page length field are defined in SPC-4 and shall be set 
to the values defined in table 130. 

An XOR disable (xordis) bit set to zero specifies that the device server shall enable processing of XOR 
commands (i.e., theXDREAD commands (see 5.40 and 5.41), theXDWRITE commands (see 5.42 and 5.43), 
the XDWRITEREAD commands (see 5.44 and 5.45), and the XPWRITE commands (see 5.46 and 5.47)). An 
xordis bit set to one shall disable processing of XOR commands. If the xordis bit is set to one and an XOR 
command is received, then the device server shall terminate the XOR command with CHECK CONDITION 
status with the sense key set to ILLEGAL REQUEST and the additional sense code set to INVALID 
COMMAND OPERATION CODE. 

The maximum xor write size field specifies the maximum transfer length in blocks that the device server 
accepts for a single XDWRITE command or XDREAD command. Requests for transfer lengths exceeding this 
limit result in CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and the additional 
sense code set to INVALID FIELD IN CDB. The maximum prefetch xdread xdwrite transfer length field in 
the Block Limits VPD page (see 6.4.2) indicates the maximum value of the maximum xor write size field 
supported by the device server. 
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6.4 Vital product data (VPD) parameters 

6.4.1 VPD parameters overview 

This subclause defines the VPD pages used only with direct-access block devices. See SPC-4 for VPD pages 
used with all device types. 

The VPD page codes specific to direct-access block devices are defined in table 131. 


Table 131 — Direct-access block device VPD page codes 


VPD page code 

VPD page name 

Reference 

Support 

requirements 

BOh 

Block Limits VPD page 

6.4.2 

Optional 

Blh 

Block Device Characteristics VPD page 

6.4.3 

Optional 

B2h to BFh 

Reserved for this standard 


6.4.2 Block Limits VPD page 

The Block Limits VPD page (see table 132) provides the application client with the means to obtain certain 
operating parameters of the logical unit. 


Table 132 — Block Limits VPD page 


Bit 

Byte 

7 6 5 

4 3 2 1 0 

0 

PERIPHERAL QUALIFIER 

PERIPHERAL DEVICE TYPE 

1 

PAGE CODE (BOh) 

2 

Reserved 

3 

PAGE LENGTH (10h) 

4 


5 


6 

(MSB) 

7 

(LSB) 

8 

(MSB) 

11 

(LSB) 

12 

(MSB) 

OPTIMAL TRANSFER LENGTH 

15 

(LSB) 

16 

(MSB) 

MAXIMUM PREFETCH XDREAD XDWRITE TRANSFER LENGTH 

19 

(LSB) 


The peripheral qualifier field and the peripheral device type field are defined in SPC-4. 

The page code field and page length field are defined in SPC-4 and shall be set to the values defined in 
table 132. 

The optimal transfer length granularity field indicates the optimal transfer length granularity in blocks for 
a single ORWRITE command, PRE-FETCH command, READ command, VERIFY command, WRITE 
command, WRITE AND VERIFY command, XDREAD command, XDWRITE command, XDWRITEREAD 
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command, or XPWRITE command. Transfers with transfer lengths not equal to a multiple of this value may 
incur significant delays in processing. 

The maximum transfer length field indicates the maximum transfer length in blocks that the device server 
accepts for a single ORWRITE command, READ command, VERIFY command, WRITE command, WRITE 
AND VERIFY command, XDWRITEREAD command, or XPWRITE command. Requests for transfer lengths 
exceeding this limit result in CHECK CONDITION status with the sense key set to ILLEGAL REQUEST and 
the additional sense code set to INVALID FIELD IN CDB. A maximum transfer length field set to zero 
indicates that there is no reported limit on the transfer length. 

The optimal transfer length field indicates the optimal transfer length in blocks for a single ORWRITE 
command, PRE-FETCH command, READ command, VERIFY command, WRITE command, WRITE AND 
VERIFY command, XDREAD command, XDWRITE command, XDWRITEREAD command, or XPWRITE 
command. Transfers with transfer lengths exceeding this value may incur significant delays in processing. 

The MAXIMUM PREFETCH XDREAD XDWRITE TRANSFER LENGTH field indicates: 

a) the maximum transfer length in blocks that the device server accepts for a single PRE-FETCH 
command; 

b) if the XOR Control mode page (see 6.3.7) is implemented, then the maximum value supported by the 
maximum xor write size field in the XOR Control mode page; and 

c) if the XOR Control mode page is not implemented, then the maximum transfer length in blocks that 
the device server accepts for a single XDWRITE command or XDREAD command. 

The device server should set the maximum prefetch xdread xdwrite transfer length field to less than or 
equal to the maximum transfer length field. 

6.4.3 Block Device Characteristics VPD page 

The Block Device Characteristics VPD page contains parameters indicating characteristics of the logical unit. 
Table 133 defines the Block Device Characteristics VPD page. 


Table 133 — Block Device Characteristics VPD page 


Bit 

Byte 

7 6 5 

4 3 2 1 0 

0 

PERIPHERAL QUALIFIER 

PERIPHERAL DEVICE TYPE 

1 

PAGE CODE (Blh) 

2 

Reserved 

3 

PAGE LENGTH (3Ch) 

4 


5 


6 

Reserved 

7 

Reserved nominal form factor 

8 

Reserved 

63 



The peripheral qualifier field and the peripheral device type field are defined in SPC-4. 

The page code field and page length field are defined in SPC-4 and shall be set to the values defined in 
table 133. 
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The medium rotation rate field is defined in table 134. 

Table 134 — medium rotation rate field 


Code 

Description 

OOOOh 

Medium rotation rate is not reported 

0001 h 

Non-rotating medium (e.g., solid state) 

0002h to 0400h 

Reserved 

0401 h to FFFEh 

Nominal medium rotation rate in rotations per minute (i.e., rpm) 

(e.g., 7 200 rpm = 1C20h, 10 000 rpm = 2710h, and 15 000 rpm = 3A98h) 

FFFFh 

Reserved 


The nominal form factor field indicates the nominal form factor of the device containing the logical unit and 
is defined in table 135. 


Table 135 — nominal form factor field 


Code 

Description 

Oh 

Nominal form factor is not reported 

1h 

5.25 inch 

2h 

3.5 inch 

3h 

2.5 inch 

4h 

1.8 inch 

5h 

Less than 1.8 inch 

All others 

Reserved 
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Annex A 

(informative) 

Numeric order codes 


A.1 Variable length CDBs 

Some commands in table 13 (see 5.1) use the variable length command format defined in SPC-4. These 
commands use operation code 7Fh and are differentiated by service action codes as described in table A.1. 

Table A.1 —Variable length command service action code assignments 


Operation code/service 
action code 

Description 

7Fh/0000h 

Reserved 

7Fh/0001h 

Reserved 

7Fh/0002h 

Reserved 

7Fh/0003h 

XDREAD (32) 

7Fh/0004h 

XDWRITE (32) 

7Fh/0005h 

Reserved 

7Fh/0006h 

XPWRITE (32) 

7Fh/0007h 

XDWRITEREAD (32) 

7Fh/0008h 

Reserved 

7Fh/0009h 

READ (32) 

7Fh/000Ah 

VERIFY (32) 

7Fh/000Bh 

WRITE (32) 

7Fh/000Ch 

WRITE AND VERIFY (32) 

7Fh/000Dh 

WRITE SAME (32) 

7Fh/000Eh to 07FFh 

Reserved 

7Fh/0800h to FFFFh 

See SPC-4 


A.2 Service action CDBs 

Some commands in table 13 (see 5.1) are implemented as device-type specific service actions for the 
SERVICE ACTION IN (16) operation code 9Eh (see SPC-4). These commands are differentiated by service 
action codes as described in table A.2. 


Table A.2 — SERVICE ACTION IN (16) service actions 


Operation code/service 
action code 

Description 

9Eh/00h to OFh 

Reserved for commands applicable to all device types (see SPC-4) 

9Eh/10h 

READ CAPACITY (16) 

9Eh/11h 

READ LONG (16) 

9Eh/12h to IFh 

Reserved 


Working Draft SCSI Block Commands - 3 (SBC-3) 




25 August 2008 


T10/1799-D Revision 16 


Some commands in table 13 (see 5.1) are implemented as device-type specific service actions for the 
SERVICE ACTION OUT (16) operation code 9Fh (see SPC-4). These commands are differentiated by service 
action codes as described in table A.3. 


Table A.3 — SERVICE ACTION OUT (16) service actions 


Operation code/service 
action code 

Description 

9Fh/00h to OFh 

Reserved for commands applicable to all device types (see SPC-4) 

9Fh/10h 

Reserved 

9Fh/11h 

WRITE LONG (16) 

9Fh/12h to IFh 

Reserved 
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Annex B 

(informative) 

XOR command examples 
B.1 XOR command examples overview 

This annex provides XOR command examples in storage array controller supervised configurations. 

B.2 Update write operation 

Figure B.1 shows a read-modify-write operation supervised by a storage array controller. The example uses a 
supervising storage array controller, a direct-access block device holding XOR-protected data (i.e., the data 
disk), and a direct-access block device holding check data (i.e., the parity disk). Three SCSI commands are 
used: an XDWRITE command, an XDREAD command, and an XPWRITE command. An XDWRITEREAD 
command may be used in place of any sequence of an XDWRITE command followed by an XDREAD 
command. 

The supervising storage array controller begins by sending XOR-protected data to the data disk using an 
XDWRITE command. 

The data disk reads old XOR-protected data from its medium, performs an XOR operation using the old 
XOR-protected data and the XOR-protected data from the supervising storage array controller, stores the 
resulting intermediate XOR data in its buffer memory, and writes the XOR-protected data from the supervising 
storage array controller to its medium. The supervising storage array controller reads the resulting 
intermediate XOR data from the buffer memory by sending the data disk an XDREAD command. 

The supervising storage array controller makes the resulting intermediate XOR data (i.e., data read with the 
XDREAD command) available to the parity disk by sending an XPWRITE command. The parity disk performs 
an XOR operation using the intermediate XOR data and the XOR data in its buffer memory. The resulting new 
XOR data is written to the medium. 
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Figure B.1 — Update write operation (storage array controller supervised) 

B.3 Regenerate operation 

Figure B.2 shows a regenerate operation supervised by a storage array controller. The example uses a 
supervising storage array controller and three direct-access block devices (i.e., disk 1, disk 2, and disk 3). 
Three SCSI commands are used: a READ command, an XDWRITE command, and an XDREAD command. 
An XDWRITEREAD command may be used in place of any sequence of an XDWRITE command followed by 
an XDREAD command. 

The supervising storage array controller begins by issuing a READ command to disk 1. The data received 
from this command is sent by the supervising storage array controller to disk 2 using an XDWRITE command 
with the disable write bit set to one. Disk 2 reads data from its medium, performs an XOR operation using 
that data and the data received from the supervising storage array controller, and stores the resulting 
intermediate XOR data in its buffer memory. The supervising storage array controller retrieves the 
intermediate XOR data from the buffer memory by issuing an XDREAD command to disk 2. The supervising 
storage array controller issues XDWRITE commands and XDREAD commands in the same manner to disk 3. 

The resulting data from disk 3 is the regenerated data. 
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Figure B.2 — Regenerate operation (storage array controller supervised) 

B.4 Rebuild operation 

Figure B.3 shows a rebuild operation supervised by a storage array controller. The example uses a 
supervising storage array controller, two direct-access block devices (i.e., disk 1 and disk 2) as the source 
devices, and one direct-access block device (i.e., disk 3) as the rebuild device. Four SCSI commands are 
used: a READ command, an XDWRITE command, an XDREAD command, and a WRITE command. An 
XDWRITEREAD command may be used in place of any sequence of an XDWRITE command followed by an 
XDREAD command. 

The supervising storage array controller begins by issuing a READ command to disk 1. The data received 
from the READ command is sent by the supervising storage array controller to disk 2 using an XDWRITE 
command with a disable write bit set to one. Disk 2 reads data from its medium, performs an XOR operation 
using that data and the data received from the supervising storage array controller, and stores the resulting 
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intermediate XOR data in its buffer memory. The supervising storage array controller retrieves the 
intermediate XOR data by sending an XDREAD command to disk 2. 

The resulting data from disk 2 is the rebuilt data and is sent to the direct-access block device being rebuilt 
(i.e., disk 3) using a WRITE command. 



Figure B.3 — Rebuild operation (storage array controller supervised) 
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CRC example in C 

The following is an example C program that generates the value for the logical block guard field in 
protection information (see 4.17). 

// picrc.cpp : SCSI SBC-2 Protection Information CRC generator 
#include "stdafx.h" 

#include <stdio.h> 

#include <malloc.h> 

/* return crc value */ 

unsigned short calculate_crc(unsigned char *frame, unsigned long length) { 

unsigned short const poly = 0x8BB7L; /* Polynomial */ 

unsigned const int poly_length = 16; 

unsigned short crc_gen; 

unsigned short x; 

unsigned int i, j, fb; 

unsigned const int invert = 0;/* l=seed with Is and invert the CRC */ 
crc_gen = 0x0000; 

crc_gen A = invert? OxFFFF: 0x0000; /* seed generator */ 

for (i = 0; i < length; i += 2) { 

/* assume little endian */ 
x = (frame [i] « 8) | frame [i + 1]; 

/* serial shift register implementation */ 
for (j = 0; j < poly_length; j+t ) { 

fb = ((x & 0x8000L) == 0x8000L) A ((crc_gen & 0x8000L) == 

0x8000L); 

x «= 1; 
crc_gen «= 1; 
if (fb) 

crc_gen A = poly; 



return crc_gen A (invert? OxFFFF: 0x0000); /* invert output */ 
} /* calculate_crc */ 

/* function prototype */ 

unsigned short calculate_crc(unsigned char *, unsigned long); 

void main (void) { 
unsigned char *buffer; 
unsigned long buffer_size = 32; 
unsigned short crc; 
unsigned int i; 

/* 32 0x00 */ 

buffer = (unsigned char *) malloc (buffer_size); 
for (i = 0; i < buffer_size; if4.) { 

buffer[i] = 0x00; 
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} 

crc = calculate_crc(buffer, buffer_size); 
printf ("Example CRC all-zeros is %04x\n", crc) ; 
free (buffer); 

/* 32 OxFF */ 

buffer = (unsigned char *) malloc (buffer_size); 
for (i = 0; i < buffer_size; i++) { 

buffer[i] = OxFF; 

} 

crc = calculate_crc(buffer, buffer_size); 
printf ("'Example CRC all-ones is %04x\n", crc) ; 
free (buffer); 

/* 0x00 incrementing to OxlF */ 

buffer = (unsigned char *) malloc (buffer_size); 
for (i =0; i < buffer_size; i++) { 

buffer[i] = i; 

} 

crc = calculate_crc(buffer, buffer_size); 

printf ("Example CRC incrementing is %04x\n", crc); 

free (buffer); 

/* OxFF OxFF 'fciien 30 zeros */ 

buffer = (unsigned char *) malloc (buffer_size); 
buffer[0] = Oxff; 
buffer[1] = Oxff; 

for (i = 2; i < buffer_size; i++) { 

buffer[i] = 0x00; 

} 

crc = calculate_crc(buffer, buffer_size); 

printf ("Example CRC FF FF then 30 zeros is %04x\n", crc); 
free (buffer); 

/* OxFF decrementing to OxEO */ 

buffer = (unsigned char *) malloc (buffer_size); 
for (i =0; i < buffer_size; i++) { 

buffer[i] = Oxff - i; 

} 

crc = calculate_crc(buffer, buffer_size); 

printf ("Example CRC FF decrementing to E0 is %04x\n", crc); 
free (buffer); 

} /* main */ 
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